# firewall

event_id: 7a7ce63f-8801-4da4-9a4f-d980a0e0425d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.124.62.62","remote_port":55971,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 99634b16-ae9d-4354-80b8-8a2467d0f27c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.13","remote_port":137,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 54198cfc-b679-46c8-aa85-b9a9736a76d8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":445,"path":"System","pid":4,"protocol":6,"protocol_name":"TCP","remote_address":"192.168.1.13","remote_port":49772,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 7f9ef85a-5775-435c-a8c7-2524e2e89427
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":138,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.13","remote_port":138,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: b0ce774a-1878-4585-b682-e1aa0ea036f9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":138,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.100","remote_port":138,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 0e27dfff-3b59-43e4-a87c-9c384e175372
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":48316,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c8ab3b5e-dec2-4d0b-a8a0-629a778db171
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":58586,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 48747e3d-8e13-44d3-af04-3f12832ad8c9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":9727,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6f00f3d4-5506-4f93-bc71-a75344a7c621
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":138,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.18","remote_port":138,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 3deba804-0348-47ec-a1bd-70443fd0024e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.13","remote_port":59708,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 4045913a-73f5-4472-9322-3a7dfd55b5b5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.100","remote_port":137,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 32747333-6b3c-45dc-9ece-0906714618aa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"35.198.74.157","remote_port":46742,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5516737b-d1d7-4f99-b792-fbfe34e4b420
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":51958,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e106e935-bd5e-4868-88a1-e5c1711da036
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58151,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f0333397-bbb7-494d-abdd-0355e51873a3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.154","remote_port":7530,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b9056b39-8e52-4b6b-adfa-0f8492617689
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.154","remote_port":46520,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 05582258-09f0-441d-ab0e-78154cf628c8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.154","remote_port":25585,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b573da70-27d8-4591-80d8-777136ec7637
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":60612,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 035a9f68-24f2-4525-b574-26bfd9ff7506
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":57546,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a352688a-1cdf-4e9b-8365-84a992ef37cd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"198.235.24.85","remote_port":55039,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ee920628-5b0f-4b9b-9f8d-3a30d26b1609
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"61.42.20.6","remote_port":59039,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: aa7a44dd-c54b-4454-836d-9a190e775b4a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"198.235.24.85","remote_port":62742,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9ebcd972-07b9-422c-942d-754ea602f292
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"198.235.24.85","remote_port":62756,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f3c9154d-934e-4066-9f8b-f9029a3eaf45
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"198.235.24.85","remote_port":58312,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 255fb023-d846-40e3-a7d4-2dc04b55ec77
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":11014,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: eaa72908-ff55-4702-9512-693b69945f43
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":15147,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5d57c48c-d94f-49db-b2bb-c7d1637fb3c0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":13318,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e98471b3-0c59-47ff-82b6-a9a3bb9c1769
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":51167,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 172c7fb3-c763-427f-b9e1-244b58f4393d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":55747,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d56271c0-59aa-4071-8e96-c67c147ce455
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":58527,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 128eeb59-f56b-4e4a-a827-3c823283caea
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":5228,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 29b8e405-40d1-415c-9991-4a33b87cdff4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":5237,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d312bc90-e39e-4d31-8e4c-590194d597b9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":60158,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8d44b97c-ddfc-4f94-b276-dbda4f85d1be
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":4102,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 84a67f2b-4752-4f43-a723-9deb25d5b04f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":50148,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e0ad1c02-4464-4798-815c-0ea861d0be5f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":36303,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 770a6fbd-aa39-4940-ab89-90d25f1acd33
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":54586,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3dc23c63-c4dd-4b60-b217-eed3a20edd7a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":41292,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e505f92c-b3b6-4acb-ac35-21b581a53935
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":53683,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e275d9b3-e5d3-45ce-b738-67e7df05fd9c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":21411,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5387bc08-0369-41e1-8425-cb5f4dce0a5b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":9872,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 00ac0c4e-1b0d-4c1f-a1d4-f794a28bf6b8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":54563,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5740143a-f33d-4418-8d59-c64001ebadfb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.226","remote_port":137,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 3a483500-4c85-4d5d-acd8-b5a52dc64263
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":20010,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f6344ebb-1e1f-4d82-a604-ccd0a3a5ee8c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":56511,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 421f65d0-9e57-4429-a637-9aafd2f42f42
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":33976,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6cc44b20-9785-4db0-baf0-f9a33b161d3a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":32767,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 130d2a08-3b14-4402-8a2c-27f9918058cd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":27597,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 879ebf45-7f43-4c10-b88b-2b920abc46b8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":42981,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3e4b2464-4974-48a8-93a3-21ee0fb587fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":52885,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f8eb8e29-81bd-4905-87ad-00083a220c27
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":51271,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9d96000f-6842-4de1-9710-30a6fa5a8a5a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":58256,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a432b8b7-7193-45eb-9b3b-82991ce41276
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":10390,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9d18e6de-853c-4fff-9433-84b040194099
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":138,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.226","remote_port":138,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 8e13b1aa-e920-4f95-b861-02cca638559b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":60302,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5625139b-747b-45ec-a39f-d2f261e07140
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.92","remote_port":24601,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 40d4fc7d-3d76-44bd-9236-7a3c77b50068
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.92","remote_port":17201,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c6126a9f-b3b5-43fa-a217-c16d4c03edfc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.92","remote_port":8810,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c5bb3094-86a8-438a-821e-41b31efeb7a7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":42042,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b2f70bc8-57a2-42bd-895d-e6c3cf2857e2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":17731,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f8181874-a6db-4678-b234-474e02b6ebb1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":10178,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d9408b0b-ec61-4ce1-b883-cc2cc4132012
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":3787,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0b76bcc3-3afc-4ff2-b9c0-09717ec69b7d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":49903,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ec0e0db2-f2f3-4be1-9ef8-b9b857c1279e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":40166,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0078185d-a61b-403d-b5dd-530bc3f6e865
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":57288,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9ab11d98-1bc3-44d1-a089-1e577d0e9821
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":10183,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2b006e5e-377f-49ea-8b3d-a71bfdb2f129
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":49850,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 030941ec-bd5d-411f-920a-7979fda64704
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":60018,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2b3a1664-962d-45f6-b4aa-efa3e161dc15
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"20.65.194.59","remote_port":45216,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7f9794ac-b0e0-4e1e-8d01-e6ffe0f1d11b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"20.65.194.59","remote_port":37540,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7d2c14c6-7ac3-4105-8a6f-11c332b3c30c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":49159,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 53c77c66-58e8-489c-be4b-95e4d7c1cb97
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.155","remote_port":10286,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c37c0777-bddc-4fb7-85f7-daf82d347510
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.155","remote_port":59885,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 77864ace-80d7-4c25-806d-fd891f2348e9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.155","remote_port":47978,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4dda138e-74d5-4889-ae71-7df3cc9bf4bf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":25331,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c8089203-3253-4436-9834-025fae7096e6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":33770,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: abc15a20-b098-4e69-a09d-cc821d35dc02
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":39870,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8f71f8e2-10bf-4cbb-ac36-e76da164581b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":49639,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c8aed6bc-1d5d-49ef-920f-92a891c551e4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":48327,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7a7685de-f4df-4872-b0aa-ba05e15c8c37
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.165","remote_port":4918,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f2ac69c0-27fc-4733-829e-3ca414103e07
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.165","remote_port":55540,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5d2903c2-8a8c-47bd-9455-ec4fec90a052
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.165","remote_port":42945,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2fc5bd44-07b4-4432-984d-207a3185a2b0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":33969,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a8e125f8-b8db-4aa6-aef0-f5c74acd0267
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":11683,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4abce907-4b1b-45f6-81b6-be4bc1124dcd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":47701,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3d673bed-4059-4310-addf-f1c9b8f11ed0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58561,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b97a15aa-7f4c-4907-9017-01e4c0c40dfb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":47204,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e7d03b33-1a75-4565-b332-385936f98a6f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"23.94.186.206","remote_port":54429,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f5fc9e8d-7e36-404c-8a62-c50e6a7edb59
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":27927,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d945a66e-3df7-41f4-8886-41e59c6b64ab
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":32169,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 678dc938-0159-4b0c-ae2a-71b5202bd61b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":32888,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a578f10b-627f-4075-b119-93a5244a0eed
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":48892,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e7af1092-58b2-4914-91e6-abee232e7a7d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":19537,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 35bd0005-315c-49b7-954d-23a218f2fdda
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":15633,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fc1dfad0-b4e1-4f19-8c86-99a808776f22
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":14147,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9fd58abc-d433-4ae4-ac08-f25ef888be2b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":46149,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 72dec089-6475-49db-b840-ea39cf03aaea
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":17495,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1df2cf55-3fc7-4a42-9a57-79c4cd4580f5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":34745,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e7ae4181-7232-4272-9661-46a2a307cad6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":47278,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bcf126f6-5a7c-45c0-a5db-372f3d2a47b1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":51659,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 04299252-7cd4-4789-9d5f-77973c39ff13
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":37743,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0c63f780-95cc-4304-9b69-8ac81d58197d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":26181,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 775ee7bc-a8a3-45b4-bd9d-f4bf3516028b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":48039,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d0676d56-80fd-46d7-b528-5619839db99e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":56819,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3ec603ae-68e0-43df-8471-60f0bd444ac7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":3428,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5d5268e5-952d-4ad9-8412-871a8a8ab15c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":39106,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 47ec2ce2-0089-4682-8277-975367d6d971
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":8609,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 99428da8-9df6-4388-8303-557562e74e3c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":18574,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a50c69fc-6890-4a39-b951-f95f9e4a48a5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":30728,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9037d150-bc4e-47bb-9f78-36d967a8f4b7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":43661,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5ed92d6e-f061-4dc2-9d44-fd0eae81246d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":63698,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7e39c67e-11ad-4d96-b48f-6a04c8692678
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":43128,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c8d43436-9fc3-4ad4-ac8e-2f3a8eab3338
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":64016,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: db7b4f5b-9338-490b-82a7-298192ba234d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":61779,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 62a5a85a-b9d2-4d49-9bed-fd7b345c6f7d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.91.171.220","remote_port":59335,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5e27de92-3c72-4ac1-bff2-edf0e81fa6bb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":49485,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 792e8cd7-cb79-4b0c-8f6d-0a629f94e2c0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":51060,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 903fb225-8128-4e01-8ba0-fc4a9bafcabb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":50910,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2d5a71b4-8050-4831-a241-7520f8dc3683
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":37542,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b6d156c7-d35d-4335-99b5-0ac29529d6f4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":41783,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a2d66e55-9e3c-41d8-b27e-0ff23149baa6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":49683,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 386a4d5c-ec6e-4aa1-b623-21341c130442
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":63629,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2acd2226-37e5-4a98-a1e9-711039c6ae53
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":60089,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 990f268c-44b8-4d66-9a51-964597731ebd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":56907,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b76520ad-3a60-4597-a5de-8fe90fa7680a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"206.168.34.221","remote_port":42700,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 16a37dc4-7f68-41ce-b020-f598e5f401b6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":53277,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dfb28663-6a96-45aa-87b7-ebdeda1021bd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"206.168.34.221","remote_port":38128,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4188c8ef-82b6-4ba6-9318-f81afd7d23a0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"206.168.34.221","remote_port":33144,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3d145e4a-2f76-4dd1-983b-bf0d5395f233
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"206.168.34.221","remote_port":33178,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8f9ec6a0-c492-477b-9f0f-5cb8b5882797
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":64522,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 95ec5a31-3a5a-4bef-8cc9-a66c041d56fa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":17165,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f4cc6b5c-e828-41a6-a385-c956ebcc8bf6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":59848,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 578abc18-c2b1-4210-a66d-87d42dd0c5f8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":34261,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3a52943a-96fc-49ad-a47a-d5f490bbf6be
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":51411,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ac1526ae-fb50-42e6-9f32-3876a883b7b1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":53903,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 480d0e09-2f2f-4ebb-bcf5-8ed953898235
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":63901,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 59393555-f8b0-4257-8a82-634bd910b1ea
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":16159,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 81924e79-0122-489c-95b6-1bb9cf166a35
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":43349,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 428b4618-38bd-49b5-b01a-b99fa5d486ec
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":10513,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 462d3841-c161-469c-8b29-42be3dd4112f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":56137,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4ce4fa82-03a5-47e9-b930-3012a31d14ef
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":59447,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bd703c48-616a-411c-ae49-c5f7faaa0292
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":54282,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 758271a1-f265-43cb-bf74-3ebefca3241b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":52154,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b0e9d4d1-9f1c-4270-a742-3f357ac9a46b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":25777,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 01240815-6a1f-4dc0-845a-5af8288fa148
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":57638,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ce74d05f-dcf0-45c1-b992-3403c3791e46
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":62420,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2af7a580-5a97-4d82-9d9e-bb780b731485
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":52991,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9783e32a-c5dd-43d9-a036-dda46d46e4d9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":59405,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 64dd051f-64c2-4187-bc67-eb860f997423
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":18000,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 46c3572d-130d-4032-9308-bf95614c17e7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":9909,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0430aea6-3ba9-46d7-8688-032de10d99f1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":3566,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b6876bad-da90-447f-a13c-d2fdf74b6dbf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":50449,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4cf0020f-f2d8-4818-be6a-a97d7f5c70dd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":55960,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bd411e34-af7f-4365-a17d-07cf7d05926a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":61732,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 66faa7cf-754d-4d20-b905-7b417b8c83b1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":45350,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e01da2e4-2c06-46bd-b3f7-ddd60135ae87
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":20014,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 11fa6891-ee37-4189-b939-9681c335ab6e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":53167,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2b37e976-c1c5-4fe6-90a1-c449b2ef2799
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":50191,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 843fa705-acaa-4d01-b0e6-c014676a671a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":54484,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fa21e4b7-5e03-48b3-865b-adedde1dfbe2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":46324,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 859ef40f-4d99-45ed-b47b-a76784f2643b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":37409,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 76a4d32c-2d70-4907-8800-e4b27bc113d1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":55543,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 760b424d-743f-4048-a4a8-9ba93dac01ec
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":57574,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0e9ab6ca-2c96-44bb-9a6e-287caf2a01b3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":59982,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8c601528-7ff1-4a83-b083-9a15e127d360
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":5315,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b3ae0561-dd73-4769-acba-f92c93b5514e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":50799,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 57a014bc-d4f7-44e7-a212-9be580babfee
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":36329,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0a94c19f-64a5-4e2e-a8f1-470ea7a1dee6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":64970,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d65e3fce-a53d-45cd-966a-918214f4f53c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":52425,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 123380b7-14a7-4e0b-a709-894b8e7506d1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":56487,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7f3b1b34-444b-4940-8331-6bb777fb0e29
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":60679,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 25c2fc4e-a81b-4867-9b54-e1f9aa974b47
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":63999,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 049f545e-0d55-4a82-b7aa-bb44e28eb216
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":49963,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c2690b54-4237-40ac-ba79-41aa97eac055
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":52229,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 28ace63e-ea0a-4e56-939d-d95a2f7cdc94
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":54379,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 860e651f-b72d-4d7d-bd71-0331e3fd5fe6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":37504,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 58ad4190-ff64-43cf-b2d5-a0e2c1a30260
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":57928,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 15c63b2e-3374-4edd-b13c-698484f9a963
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":38928,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b797f8a0-d17e-42f8-bd82-47872d487176
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":59305,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3a0028d9-b721-41bd-ad88-23561192a969
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":59989,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f9cbafb5-42a2-48d3-a51a-ff1f42022c13
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.91.171.220","remote_port":58398,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ced08da7-e7df-4b2b-842d-f40bb8892323
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":62000,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 269ca7d8-cd0e-406d-9ab4-ff5b178e01d4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"4.211.85.23","remote_port":64730,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f96e5eef-a3e3-48db-a887-46a269d37511
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":9149,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5646b5ed-92fd-4373-a093-4e9a327c6bd5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":59046,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 05c65f43-0b9d-4eff-84fd-a286eadd5d94
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":50154,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 33872581-9953-4bfe-ae30-3893f93fe18f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":48436,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a69ec4b0-a5a3-43f7-bbc5-7b16b5349aae
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":34246,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2553ff18-822a-4c2e-803f-c37203e567a6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":19610,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 72c10517-2c0f-4e5c-a60d-c6b34ad6a78b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":18759,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 13abc019-de4a-4a40-ac74-af75ac307ca7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":4372,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7d8605c3-91fc-4865-be79-4c3fb1ecd3ca
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":49538,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


# intrusion_prevention

event_id: 3d8d6082-edb5-4c47-95e2-ed76565bc64a
log_level: critical
event_category: detections
event_data:
{"connection_id":1643261,"detection_time":1742003532,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53437,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4fe6bccf-be02-44d0-bce4-3fe23df206d6
log_level: critical
event_category: detections
event_data:
{"connection_id":1643822,"detection_time":1742003696,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":29919,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 984eaadb-130c-44da-833d-3f44c634fac1
log_level: critical
event_category: detections
event_data:
{"connection_id":1643843,"detection_time":1742003703,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":21452,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14c74df7-100c-41ee-ab38-1b1d8b2d58da
log_level: critical
event_category: detections
event_data:
{"connection_id":1643876,"detection_time":1742003709,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":12728,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02c79092-a361-4532-8082-8d2b8c2ef765
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742003750,"event_type_id":6,"status":"blocked"}


event_id: b16b2815-8771-4f28-90f6-04a532d47b38
log_level: critical
event_category: detections
event_data:
{"connection_id":1644011,"detection_time":1742003750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52630,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5393a5b3-9870-4925-b619-4c87ef696892
log_level: critical
event_category: detections
event_data:
{"connection_id":1644609,"detection_time":1742003933,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":57970,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 84ca723c-cdc5-4e94-8ff5-712ccf69af1a
log_level: critical
event_category: detections
event_data:
{"connection_id":1644632,"detection_time":1742003940,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":45754,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 966bc227-d448-4fa9-bf5b-5146f0d48b11
log_level: critical
event_category: detections
event_data:
{"connection_id":1644675,"detection_time":1742003946,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":32715,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0eb0e001-7222-4ddb-b6c1-60a0e4c6f851
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742004031,"event_type_id":6,"status":"blocked"}


event_id: 43fecccd-bb17-4f46-816e-dc46cb7d0fa2
log_level: critical
event_category: detections
event_data:
{"connection_id":1644945,"detection_time":1742004031,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33946,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5b791846-b4b4-4541-9fbd-f39d3432512c
log_level: critical
event_category: detections
event_data:
{"connection_id":1645470,"detection_time":1742004166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":14609,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1461581c-81b0-46bf-8cb9-071ce551a9ea
log_level: critical
event_category: detections
event_data:
{"connection_id":1645489,"detection_time":1742004173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":7309,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c2b0677d-40ef-4ba0-8b15-5ada26d8b106
log_level: critical
event_category: detections
event_data:
{"connection_id":1645541,"detection_time":1742004179,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":58278,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 05bfecbe-56a4-4db1-97f8-6d322310e687
log_level: critical
event_category: detections
event_data:
{"connection_id":1645705,"detection_time":1742004218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":34935,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2028b29-0eea-4a41-b80f-9631f978862e
log_level: critical
event_category: detections
event_data:
{"connection_id":1645732,"detection_time":1742004225,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":25760,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 74ff8402-fe9b-4edc-b462-714b396a157a
log_level: critical
event_category: detections
event_data:
{"connection_id":1645758,"detection_time":1742004231,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":17835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 54498363-9623-4353-8659-fcf624f4ce0c
log_level: critical
event_category: detections
event_data:
{"connection_id":1646186,"detection_time":1742004350,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":35324,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 93e0d15e-71c0-4409-b443-827aa00519d5
log_level: critical
event_category: detections
event_data:
{"connection_id":1646212,"detection_time":1742004357,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":26499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b8af4f3c-54ed-420f-91ef-325b9780b361
log_level: critical
event_category: detections
event_data:
{"connection_id":1646238,"detection_time":1742004363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":17616,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 132b1e0f-763d-4a8d-b0bc-c07c125e9461
log_level: critical
event_category: detections
event_data:
{"connection_id":1647990,"detection_time":1742004884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":14587,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 530f91d0-17c8-4003-a560-b15d77af28f2
log_level: critical
event_category: detections
event_data:
{"connection_id":1648001,"detection_time":1742004891,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":3546,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 907c4c4f-12af-4cab-a90c-f3571d873286
log_level: critical
event_category: detections
event_data:
{"connection_id":1648034,"detection_time":1742004897,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":51590,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8866e646-a73f-44b3-b2fb-6be0ec5520fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742005035,"event_type_id":6,"status":"blocked"}


event_id: 0be10457-fe25-4f63-855f-1691ffd69197
log_level: critical
event_category: detections
event_data:
{"connection_id":1648494,"detection_time":1742005035,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50999,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0f9e8f1a-37ed-46a6-93db-1c68ff7edc01
log_level: critical
event_category: detections
event_data:
{"connection_id":1648892,"detection_time":1742005160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":14964,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e86c72bc-cb9f-4467-b385-d1310a2cb5c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1648911,"detection_time":1742005166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":1964,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 68268f82-b2a2-4e95-b0e9-a9b35120b884
log_level: critical
event_category: detections
event_data:
{"connection_id":1648939,"detection_time":1742005172,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":8576,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5adc8b79-04c2-4593-b578-adea4190896c
log_level: critical
event_category: detections
event_data:
{"connection_id":1648945,"detection_time":1742005173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":46316,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5a47074c-b38f-4dbb-9920-03d6663feee8
log_level: critical
event_category: detections
event_data:
{"connection_id":1648961,"detection_time":1742005179,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":54070,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86330bce-e8ab-4e46-ae23-0f400a4650ce
log_level: critical
event_category: detections
event_data:
{"connection_id":1648977,"detection_time":1742005185,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":40958,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8838ff6-cefe-4d03-aea5-7f79eb7eb234
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742005213,"event_type_id":6,"status":"blocked"}


event_id: dad0d1a2-cbb6-4b3a-a0ea-5d36e353c8d8
log_level: critical
event_category: detections
event_data:
{"connection_id":1649067,"detection_time":1742005213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50080,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87894653-17da-454c-9dc5-270723d77e6a
log_level: critical
event_category: detections
event_data:
{"connection_id":1649217,"detection_time":1742005265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":41356,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c2ef7a9-94d1-4abc-9c5a-75a94d86aaac
log_level: critical
event_category: detections
event_data:
{"connection_id":1649231,"detection_time":1742005271,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":33009,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4fa1fd26-3e54-4068-a8e6-a133608ffd6a
log_level: critical
event_category: detections
event_data:
{"connection_id":1649246,"detection_time":1742005277,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":22627,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c5cfbff1-ed4d-4d5e-80ed-ae65161b584f
log_level: critical
event_category: detections
event_data:
{"connection_id":1649594,"detection_time":1742005388,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":40255,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 829a9be7-b9b1-4a3c-bcf6-ca943084e7f4
log_level: critical
event_category: detections
event_data:
{"connection_id":1649605,"detection_time":1742005395,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":30032,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8a0fb5f6-8fd2-447e-98d5-7724ce3ccfb1
log_level: critical
event_category: detections
event_data:
{"connection_id":1649621,"detection_time":1742005401,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":18537,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8f67d921-8f21-4de6-972b-439280cf3ee7
log_level: critical
event_category: detections
event_data:
{"connection_id":1649946,"detection_time":1742005499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":33162,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6bea69d2-3cf3-41e0-8203-6fde4598b655
log_level: critical
event_category: detections
event_data:
{"connection_id":1649967,"detection_time":1742005505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":24749,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8147c1bc-f281-44f6-9b3b-8f52c9c88dcc
log_level: critical
event_category: detections
event_data:
{"connection_id":1649983,"detection_time":1742005511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":15810,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 617d1506-5e97-4283-ae46-ffe558b805fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742005704,"event_type_id":6,"status":"blocked"}


event_id: 91f3a334-a7ac-4574-b874-bb8e9fdc70c5
log_level: critical
event_category: detections
event_data:
{"connection_id":1650637,"detection_time":1742005704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48911,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 12348477-db8e-431d-aa4f-d3db954698fa
log_level: critical
event_category: detections
event_data:
{"connection_id":1651904,"detection_time":1742006031,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":50445,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac1f4351-db09-4ca6-85b1-6437e9e615cf
log_level: critical
event_category: detections
event_data:
{"connection_id":1651922,"detection_time":1742006037,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":41523,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0be38f97-e608-4fa0-b4c3-81d9c729b0a0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006040,"event_type_id":6,"status":"blocked"}


event_id: c0d6dffd-b2e8-48c9-a899-958113a4a758
log_level: critical
event_category: detections
event_data:
{"connection_id":1651929,"detection_time":1742006040,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40817,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bdee7374-51d1-4a0b-812d-f16a124f842c
log_level: critical
event_category: detections
event_data:
{"connection_id":1651949,"detection_time":1742006044,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":30864,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 00389092-0265-40c0-a9ad-12d856ff3101
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006183,"event_type_id":6,"status":"blocked"}


event_id: 2744a8c2-819e-4752-82b1-7c7e989df471
log_level: critical
event_category: detections
event_data:
{"connection_id":1652376,"detection_time":1742006183,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":47750,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 038bdff2-a142-4190-a71c-a3ed240daf6c
log_level: critical
event_category: detections
event_data:
{"connection_id":1652794,"detection_time":1742006322,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":12499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7171158c-74dc-4e7c-92e6-28a05b705478
log_level: critical
event_category: detections
event_data:
{"connection_id":1652815,"detection_time":1742006329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":3389,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60f74ede-3fad-495c-9c64-b054885ec013
log_level: critical
event_category: detections
event_data:
{"connection_id":1652834,"detection_time":1742006335,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":53711,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 18a62768-5c85-433b-9e4b-42de1633598f
log_level: critical
event_category: detections
event_data:
{"connection_id":1653196,"detection_time":1742006458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":3853,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: da22aad7-f646-4906-bf66-e64f3f1482a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1653242,"detection_time":1742006464,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":54442,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee8fac65-7364-4b00-8ea4-102c31d79884
log_level: critical
event_category: detections
event_data:
{"connection_id":1653259,"detection_time":1742006471,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":46335,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5dff5e2e-290e-435b-ab16-f8f66c65361a
log_level: critical
event_category: detections
event_data:
{"connection_id":1653320,"detection_time":1742006496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":59366,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cc435bd8-c2a8-437a-9c08-2663fab98650
log_level: critical
event_category: detections
event_data:
{"connection_id":1653344,"detection_time":1742006499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":35339,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 35ad59b6-b639-47e4-b7ee-f5143d1afbe0
log_level: critical
event_category: detections
event_data:
{"connection_id":1653359,"detection_time":1742006503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":50423,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e6f7351c-0c43-4b85-9f45-d3cc5db09244
log_level: critical
event_category: detections
event_data:
{"connection_id":1653369,"detection_time":1742006505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":24276,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3813adb9-89b6-4c5c-b070-40923e9320b6
log_level: critical
event_category: detections
event_data:
{"connection_id":1653380,"detection_time":1742006509,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":41888,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eb07837f-4cae-4158-ace8-139973189a72
log_level: critical
event_category: detections
event_data:
{"connection_id":1653392,"detection_time":1742006512,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":13840,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6df4d43e-edab-4514-b75d-c9cb7c3f6f68
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006541,"event_type_id":6,"status":"blocked"}


event_id: c4f57ac8-dc72-4ee4-8b80-45ba13afa481
log_level: critical
event_category: detections
event_data:
{"connection_id":1653499,"detection_time":1742006541,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49599,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a0e0681-2ee7-4696-8f12-fe212d5ed571
log_level: critical
event_category: detections
event_data:
{"connection_id":1653541,"detection_time":1742006554,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":6738,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 04d6a099-96e7-4f3c-8b21-c81637a8c5a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1653556,"detection_time":1742006560,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":57033,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dfed13c8-4b74-4aa8-a6fe-6ed39ab92a73
log_level: critical
event_category: detections
event_data:
{"connection_id":1653567,"detection_time":1742006567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":48653,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6795a674-8682-4e27-b2ad-f97a9edfa542
log_level: critical
event_category: detections
event_data:
{"connection_id":1653826,"detection_time":1742006650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":33609,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9de01473-809c-474e-811e-b79cfe0cb2fc
log_level: critical
event_category: detections
event_data:
{"connection_id":1653863,"detection_time":1742006656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":25423,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c1edb799-7259-4591-b587-31bf8b0cd216
log_level: critical
event_category: detections
event_data:
{"connection_id":1653884,"detection_time":1742006663,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":16400,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f31adddc-6e80-4721-a802-72c0c63d3970
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006672,"event_type_id":6,"status":"blocked"}


event_id: 779d99ca-2309-4505-a8cf-ed62c5e9c256
log_level: critical
event_category: detections
event_data:
{"connection_id":1653914,"detection_time":1742006672,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46671,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8e7eb107-dd20-4673-b839-2debe0bbad2b
log_level: critical
event_category: detections
event_data:
{"connection_id":1654489,"detection_time":1742006845,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":37478,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 92aea5e5-3e55-4785-844c-83efa5c300d5
log_level: critical
event_category: detections
event_data:
{"connection_id":1654523,"detection_time":1742006852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":26212,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 05bda64b-6134-4508-82b1-bbe5fdaed4ea
log_level: critical
event_category: detections
event_data:
{"connection_id":1654542,"detection_time":1742006858,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":15427,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: df5ba1ec-c33b-46b8-9720-3a667c40ab3c
log_level: critical
event_category: detections
event_data:
{"connection_id":1655083,"detection_time":1742007036,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":59913,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: de71c192-f118-4f97-92c3-f5ba517056e9
log_level: critical
event_category: detections
event_data:
{"connection_id":1655115,"detection_time":1742007043,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":50545,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a7be0bce-38ba-4aa7-b69e-c0c74a66e23e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742007047,"event_type_id":6,"status":"blocked"}


event_id: 5a3298d1-051f-453f-8a2f-3fcba46753c5
log_level: critical
event_category: detections
event_data:
{"connection_id":1655142,"detection_time":1742007047,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58704,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66d3b978-ad09-4490-ae9b-7dd051a76ae5
log_level: critical
event_category: detections
event_data:
{"connection_id":1655153,"detection_time":1742007049,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":43370,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7d1fd957-2fa8-4714-90d7-480aab9610ae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742007156,"event_type_id":6,"status":"blocked"}


event_id: d560af0b-1922-449c-9591-6820fc56f6f9
log_level: critical
event_category: detections
event_data:
{"connection_id":1655471,"detection_time":1742007156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45702,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f040371d-5a8e-4023-8b05-ade7b27b4108
log_level: critical
event_category: detections
event_data:
{"connection_id":1656881,"detection_time":1742007603,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":21183,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ec671a6-d1c6-4ad0-bf49-af87258a91ad
log_level: critical
event_category: detections
event_data:
{"connection_id":1656912,"detection_time":1742007609,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":13773,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 849bc811-cefc-483f-8118-1e2527d8b403
log_level: critical
event_category: detections
event_data:
{"connection_id":1656933,"detection_time":1742007616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":7951,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2df95fad-7df1-489e-85be-13900c882aaa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742007650,"event_type_id":6,"status":"blocked"}


event_id: 83e79f1d-1971-46a1-acfa-ee4ae0ea7db0
log_level: critical
event_category: detections
event_data:
{"connection_id":1657051,"detection_time":1742007650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44698,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 86434eb8-cf9e-4c82-ae81-5435915007c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1657734,"detection_time":1742007827,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":43559,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a0a7569f-64b7-48ff-adf2-cddd17fad628
log_level: critical
event_category: detections
event_data:
{"connection_id":1657765,"detection_time":1742007833,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":34774,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b5734631-432e-46bd-990c-a11a0698cab6
log_level: critical
event_category: detections
event_data:
{"connection_id":1657798,"detection_time":1742007840,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":25416,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 597dce4e-40dd-4627-a06e-83337c7a3508
log_level: critical
event_category: detections
event_data:
{"connection_id":1658327,"detection_time":1742007998,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":33199,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62fba0d7-7021-4172-a310-992013366743
log_level: critical
event_category: detections
event_data:
{"connection_id":1658345,"detection_time":1742008005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":20087,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0bcc9fee-ddfb-4d38-8e8d-5c9947e86fc4
log_level: critical
event_category: detections
event_data:
{"connection_id":1658361,"detection_time":1742008011,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":6801,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aa43908b-92a5-4733-8025-302cbcc1b5b1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742008057,"event_type_id":6,"status":"blocked"}


event_id: 2497029e-8297-4348-a122-ed8da0d6b3e8
log_level: critical
event_category: detections
event_data:
{"connection_id":1658498,"detection_time":1742008057,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48686,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dfae54b3-f426-44ff-b1bd-6c1df1ff60f0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742008132,"event_type_id":6,"status":"blocked"}


event_id: 6308e6b5-b7c4-4330-abdc-95764bc9f287
log_level: critical
event_category: detections
event_data:
{"connection_id":1658749,"detection_time":1742008132,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43494,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: acf410df-f4b1-4b6c-b7b3-da148123f566
log_level: critical
event_category: detections
event_data:
{"connection_id":1658980,"detection_time":1742008201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":18353,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b0045a7-b283-4f18-9dc1-1b95d30d3b0e
log_level: critical
event_category: detections
event_data:
{"connection_id":1659004,"detection_time":1742008208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":10277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d7ab7aa1-e9a6-4232-b84f-b9e19b07cecc
log_level: critical
event_category: detections
event_data:
{"connection_id":1659029,"detection_time":1742008214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":1510,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 495e8b55-fbc6-4d80-b97f-bbc4d1f60909
log_level: critical
event_category: detections
event_data:
{"connection_id":1659164,"detection_time":1742008256,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":6042,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fa61ae81-5d66-436e-82f0-983896af1144
log_level: critical
event_category: detections
event_data:
{"connection_id":1659178,"detection_time":1742008262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":52305,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 294fd01c-8603-49b7-9da1-e43dd9e60e59
log_level: critical
event_category: detections
event_data:
{"connection_id":1659205,"detection_time":1742008268,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":38736,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: da757b30-cc6b-45d7-864e-2ea34ee2676a
log_level: critical
event_category: detections
event_data:
{"connection_id":1659593,"detection_time":1742008391,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":27776,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0590346f-7b15-4ae5-9c05-4d19af11223f
log_level: critical
event_category: detections
event_data:
{"connection_id":1659613,"detection_time":1742008398,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":14595,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b128018-0d4d-4e93-9502-4ad1f11513fb
log_level: critical
event_category: detections
event_data:
{"connection_id":1659626,"detection_time":1742008404,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":1508,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5df10da-6799-4078-a282-a88c8f486db5
log_level: critical
event_category: detections
event_data:
{"connection_id":1660361,"detection_time":1742008623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":40529,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 984bca45-6929-4e8e-8ac7-6dcbfe71b371
log_level: critical
event_category: detections
event_data:
{"connection_id":1660381,"detection_time":1742008630,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":32305,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0d33cae1-d089-462f-896f-9af39ad4457b
log_level: critical
event_category: detections
event_data:
{"connection_id":1660396,"detection_time":1742008636,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":23673,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c7e1935-fbe3-41de-a1b8-82d557a6d554
log_level: critical
event_category: detections
event_data:
{"connection_id":1660620,"detection_time":1742008709,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":7870,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d7fb3d7e-1328-4911-8ed2-f7f5d0931449
log_level: critical
event_category: detections
event_data:
{"connection_id":1660635,"detection_time":1742008716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":56437,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 26601084-52af-43de-8fad-01a9ee34e38d
log_level: critical
event_category: detections
event_data:
{"connection_id":1660670,"detection_time":1742008722,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":43774,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b580731-285c-4403-b348-a44e7238931e
log_level: critical
event_category: detections
event_data:
{"connection_id":1660863,"detection_time":1742008779,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":39961,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 72d66b19-72de-4535-8abf-c2d2b7663796
log_level: critical
event_category: detections
event_data:
{"connection_id":1660885,"detection_time":1742008785,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":31069,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 26e76cf1-9555-46eb-8b5e-0b9abd177b22
log_level: critical
event_category: detections
event_data:
{"connection_id":1660894,"detection_time":1742008790,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":43110,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb843c0a-a219-4087-b243-7eebdadcbb75
log_level: critical
event_category: detections
event_data:
{"connection_id":1660900,"detection_time":1742008792,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":22799,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1eed8ee8-50c5-4138-9fdb-2ddb6f589364
log_level: critical
event_category: detections
event_data:
{"connection_id":1660912,"detection_time":1742008796,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":35767,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f042cc53-2d2c-45ca-97ca-89f79367b826
log_level: critical
event_category: detections
event_data:
{"connection_id":1660946,"detection_time":1742008802,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":28281,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ae06501-4bd2-442e-9db4-c01feaa2df87
log_level: critical
event_category: detections
event_data:
{"connection_id":1661365,"detection_time":1742008922,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":41229,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3483df8a-ad99-4604-8df5-68424c4120b8
log_level: critical
event_category: detections
event_data:
{"connection_id":1661388,"detection_time":1742008928,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":32807,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c7ca39de-e410-4a3f-a480-a31281f61ea5
log_level: critical
event_category: detections
event_data:
{"connection_id":1661406,"detection_time":1742008935,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":19089,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 69beab81-47c5-4e0e-963e-91d0d01fcde7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742009102,"event_type_id":6,"status":"blocked"}


event_id: 8bc8f027-1482-43de-aadb-3de83d5d4698
log_level: critical
event_category: detections
event_data:
{"connection_id":1661975,"detection_time":1742009102,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41295,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e09f44c1-13cc-4d88-9d84-1c84bec69f9b
log_level: critical
event_category: detections
event_data:
{"connection_id":1662142,"detection_time":1742009154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":57796,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5786cc2-c492-40fa-9035-42418a40587e
log_level: critical
event_category: detections
event_data:
{"connection_id":1662162,"detection_time":1742009160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":47361,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5027b42e-4c67-4c76-9797-4e62e87cfdb5
log_level: critical
event_category: detections
event_data:
{"connection_id":1662203,"detection_time":1742009166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":38579,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f651900-6fd2-41c0-89d1-f42edadddf26
log_level: critical
event_category: detections
event_data:
{"connection_id":1662393,"detection_time":1742009218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":45733,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61362d71-b8a1-4fdc-8462-4fa6aebcf44e
log_level: critical
event_category: detections
event_data:
{"connection_id":1662424,"detection_time":1742009224,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":36387,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ef827877-7535-4ea5-9c1e-52c8de528066
log_level: critical
event_category: detections
event_data:
{"connection_id":1662447,"detection_time":1742009230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":28549,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc4d78c4-ba4b-42a4-b028-11db55616e42
log_level: critical
event_category: detections
event_data:
{"connection_id":1662560,"detection_time":1742009265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":56618,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1956a082-d7fc-4ee3-908b-26b771624018
log_level: critical
event_category: detections
event_data:
{"connection_id":1662579,"detection_time":1742009271,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":47809,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a4686fe8-6ac9-4d55-bb54-efb3f463c73b
log_level: critical
event_category: detections
event_data:
{"connection_id":1662600,"detection_time":1742009278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":38578,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d2c18b7a-0c85-4578-b2ce-ecead4d7b60f
log_level: critical
event_category: detections
event_data:
{"connection_id":1662866,"detection_time":1742009351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":40552,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 17d72fc1-439f-411a-a5a0-acd09d6389b2
log_level: critical
event_category: detections
event_data:
{"connection_id":1662887,"detection_time":1742009358,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":27317,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7d4f5c0b-6dab-4873-9a26-1dbcbe5837ad
log_level: critical
event_category: detections
event_data:
{"connection_id":1662909,"detection_time":1742009364,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":13562,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cfbcd6b5-f6c5-485a-80ad-e6130a418dcb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742009590,"event_type_id":6,"status":"blocked"}


event_id: 15777b55-7cc2-43fc-ad16-315a5078ec92
log_level: critical
event_category: detections
event_data:
{"connection_id":1663732,"detection_time":1742009590,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40938,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1c851b40-54e0-426e-9c38-fc3d37e8a03c
log_level: critical
event_category: detections
event_data:
{"connection_id":1663839,"detection_time":1742009615,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":19490,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 316a56f8-ae58-4784-af82-20bd3d4554c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1663871,"detection_time":1742009622,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":51766,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 22dbc8cc-b797-4c44-8e44-54798fea82a2
log_level: critical
event_category: detections
event_data:
{"connection_id":1663890,"detection_time":1742009628,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":23840,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cd14fdf5-61ce-4f4f-b5df-d5c2ada0fe80
log_level: critical
event_category: detections
event_data:
{"connection_id":1664031,"detection_time":1742009661,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":59814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5a88407f-490d-4109-9d11-46d1ce79edc0
log_level: critical
event_category: detections
event_data:
{"connection_id":1664043,"detection_time":1742009667,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":51444,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 519c5239-bc87-46a4-8c1c-022209d74656
log_level: critical
event_category: detections
event_data:
{"connection_id":1664064,"detection_time":1742009674,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":43115,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: af57fe56-e3a3-4c12-ac12-48e35e4a5d98
log_level: critical
event_category: detections
event_data:
{"connection_id":1664492,"detection_time":1742009800,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":23511,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c9c1f873-8755-4237-9f39-660141b41066
log_level: critical
event_category: detections
event_data:
{"connection_id":1664529,"detection_time":1742009807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":15752,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d6a78a2b-3d8b-4e79-9310-6b7347e92dc0
log_level: critical
event_category: detections
event_data:
{"connection_id":1664543,"detection_time":1742009813,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":6626,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bd086bf3-6a49-4076-9a8d-e0928181a81d
log_level: critical
event_category: detections
event_data:
{"connection_id":1665030,"detection_time":1742009954,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":30803,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7d6334b8-d9c8-4750-abec-920b568d271f
log_level: critical
event_category: detections
event_data:
{"connection_id":1665064,"detection_time":1742009960,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":18015,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aefc8617-22fa-450c-96d2-aa8adf266d28
log_level: critical
event_category: detections
event_data:
{"connection_id":1665090,"detection_time":1742009966,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":8250,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b711603c-f4a2-4af7-b7d0-39a67bc66413
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742010084,"event_type_id":6,"status":"blocked"}


event_id: 9cd7f252-ad33-4b98-9dfb-b1cb12512d5b
log_level: critical
event_category: detections
event_data:
{"connection_id":1665535,"detection_time":1742010084,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40117,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ed234d6-b647-47e2-90a3-627e5103e03d
log_level: critical
event_category: detections
event_data:
{"connection_id":1665861,"detection_time":1742010170,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":1805,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 45ea6c2b-94b9-4988-ad06-f7f8492fc2b1
log_level: critical
event_category: detections
event_data:
{"connection_id":1665892,"detection_time":1742010176,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":51768,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 96b3da62-ec1a-4293-b6d2-8569003f51da
log_level: critical
event_category: detections
event_data:
{"connection_id":1665912,"detection_time":1742010183,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":42499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dfc95377-510f-4ce6-857b-fddc8f41ff5e
log_level: critical
event_category: detections
event_data:
{"connection_id":1666442,"detection_time":1742010331,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":1667,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d413fdb3-aa9c-4e73-8904-f3c51bc48d70
log_level: critical
event_category: detections
event_data:
{"connection_id":1666466,"detection_time":1742010337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":48066,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 130f8cb3-fafa-4d2b-9659-66bec8109323
log_level: critical
event_category: detections
event_data:
{"connection_id":1666482,"detection_time":1742010341,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":6864,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb290c90-ac66-4995-8c4c-9114a9c9b37b
log_level: critical
event_category: detections
event_data:
{"connection_id":1666490,"detection_time":1742010344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":34501,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e03a3f61-99dc-4ef8-80f4-3d17f9bb568e
log_level: critical
event_category: detections
event_data:
{"connection_id":1666499,"detection_time":1742010347,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":58049,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cbf549b8-e53a-489c-b6c6-0434a3bf7303
log_level: critical
event_category: detections
event_data:
{"connection_id":1666518,"detection_time":1742010354,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":49098,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 399ae943-f8cf-4007-98e2-1400b6d95a37
log_level: critical
event_category: detections
event_data:
{"connection_id":1667158,"detection_time":1742010523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":51750,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: febf3023-907d-47f2-af69-f27c70acbe09
log_level: critical
event_category: detections
event_data:
{"connection_id":1667181,"detection_time":1742010529,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":43842,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f77a56b2-3cad-4ef2-9473-4845e7663bb7
log_level: critical
event_category: detections
event_data:
{"connection_id":1667202,"detection_time":1742010536,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":35274,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 104df3e1-53a4-4086-bf75-bdec3b7089e9
log_level: critical
event_category: detections
event_data:
{"connection_id":1667389,"detection_time":1742010587,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":35494,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6e3e66c3-967e-44af-9a5c-9e267c3a26b6
log_level: critical
event_category: detections
event_data:
{"connection_id":1667428,"detection_time":1742010593,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":27328,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d4d706a4-85b7-4cf1-9c06-2dd66750f813
log_level: critical
event_category: detections
event_data:
{"connection_id":1667453,"detection_time":1742010600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":19093,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c7894810-a442-4058-bb26-2414e7f2db44
log_level: critical
event_category: detections
event_data:
{"connection_id":1667724,"detection_time":1742010675,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":19814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 364b7fce-9cfa-4b89-9320-b9c9b2cfa21c
log_level: critical
event_category: detections
event_data:
{"connection_id":1667742,"detection_time":1742010681,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":11788,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 46ed0c61-b0f1-40ea-9f7c-848fbcfc1224
log_level: critical
event_category: detections
event_data:
{"connection_id":1667765,"detection_time":1742010687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":3552,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ae0693c8-c6f8-4047-8219-42aed49627b2
log_level: critical
event_category: detections
event_data:
{"connection_id":1668029,"detection_time":1742010763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":35901,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3361be78-c4c5-41ae-a03b-6fecfc390daa
log_level: critical
event_category: detections
event_data:
{"connection_id":1668054,"detection_time":1742010769,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":22904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: df359ce0-a84e-4e0d-9ab6-f043ffb3b77d
log_level: critical
event_category: detections
event_data:
{"connection_id":1668068,"detection_time":1742010776,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":9459,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a67e4b78-3e77-4769-91f3-431376e17452
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742011057,"event_type_id":6,"status":"blocked"}


event_id: ad4cd0ef-eb92-4271-b79b-06b5cec5c631
log_level: critical
event_category: detections
event_data:
{"connection_id":1669035,"detection_time":1742011058,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37162,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98fd7c1f-0e7c-4ec6-a518-d8ea13bba378
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742011064,"event_type_id":6,"status":"blocked"}


event_id: 2c8ad4fd-24c9-4cc9-a9fa-99028de39d36
log_level: critical
event_category: detections
event_data:
{"connection_id":1669071,"detection_time":1742011064,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45606,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 908b1243-ccd6-45e4-b730-f49e368a9c08
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742011535,"event_type_id":6,"status":"blocked"}


event_id: 745473e0-e257-4086-b63f-2cf6f6e7a0d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1670792,"detection_time":1742011535,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c1b436b8-bcb6-4e0d-9035-d1479956623b
log_level: critical
event_category: detections
event_data:
{"connection_id":1670997,"detection_time":1742011595,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":23399,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f5583326-1ff6-49c8-87c1-d6cc35f98e89
log_level: critical
event_category: detections
event_data:
{"connection_id":1671011,"detection_time":1742011602,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":15276,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cfd7e340-c4fb-4d83-bbfb-332b0d1e7a14
log_level: critical
event_category: detections
event_data:
{"connection_id":1671047,"detection_time":1742011608,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":6642,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 93b20269-f227-404e-8a8a-cdcbae1b0953
log_level: critical
event_category: detections
event_data:
{"connection_id":1671557,"detection_time":1742011766,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":39000,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 507b7eeb-8cdd-4a81-a18a-a87d1b6f4d8a
log_level: critical
event_category: detections
event_data:
{"connection_id":1671581,"detection_time":1742011772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":26395,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8ad5d36e-644f-4687-bbd0-9575eaee998f
log_level: critical
event_category: detections
event_data:
{"connection_id":1671603,"detection_time":1742011779,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":16208,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5abed4d7-6d7b-43ed-909b-0ad3183f7598
log_level: critical
event_category: detections
event_data:
{"connection_id":1671705,"detection_time":1742011807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":2034,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d07af4d2-7081-4e3a-88fd-8bd329de3bd2
log_level: critical
event_category: detections
event_data:
{"connection_id":1671718,"detection_time":1742011813,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":45333,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ca9e5870-32c5-4ecd-bb08-f980480398ce
log_level: critical
event_category: detections
event_data:
{"connection_id":1671757,"detection_time":1742011820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":31350,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e3d4847b-8786-4fa2-b89c-802d361e6557
log_level: critical
event_category: detections
event_data:
{"connection_id":1672395,"detection_time":1742012009,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":19195,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1ca39ec4-5f12-4367-8c6d-55b1f934a478
log_level: critical
event_category: detections
event_data:
{"connection_id":1672429,"detection_time":1742012015,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":38597,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 293962aa-99ef-4570-becf-38d9f2fa407e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012021,"event_type_id":6,"status":"blocked"}


event_id: 8ede84ef-c66f-4cc4-a34e-e07ca6dce551
log_level: critical
event_category: detections
event_data:
{"connection_id":1672445,"detection_time":1742012021,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33889,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bddc53a8-fce5-4700-8406-946f98574ba3
log_level: critical
event_category: detections
event_data:
{"connection_id":1672449,"detection_time":1742012021,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":2764,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e31632ea-677c-42cc-828e-4d384fbbe010
log_level: critical
event_category: detections
event_data:
{"connection_id":1672510,"detection_time":1742012042,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":26054,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61f5400b-a316-4797-954c-298266351ad6
log_level: critical
event_category: detections
event_data:
{"connection_id":1672544,"detection_time":1742012048,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":45928,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6be55c9c-feb1-49cc-8c82-a8d996da4903
log_level: critical
event_category: detections
event_data:
{"connection_id":1672551,"detection_time":1742012051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":12715,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: af6a57f1-db3b-4b90-87c4-c37aabfe8e1b
log_level: critical
event_category: detections
event_data:
{"connection_id":1672581,"detection_time":1742012054,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":2124,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ba35cacf-9780-44e4-83e5-17a54e8ed7d2
log_level: critical
event_category: detections
event_data:
{"connection_id":1672599,"detection_time":1742012061,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":22816,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b7f030a-457d-40f4-a0f7-22c76dd3ddcd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012070,"event_type_id":6,"status":"blocked"}


event_id: bda6fc06-1775-4c67-8470-d6f81993ddc8
log_level: critical
event_category: detections
event_data:
{"connection_id":1672627,"detection_time":1742012070,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36807,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 99283490-2f4a-431b-ae24-d4a2beb86835
log_level: critical
event_category: detections
event_data:
{"connection_id":1672766,"detection_time":1742012108,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":12887,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 874703d2-59e4-4416-ab0e-dc1d47ee6df0
log_level: critical
event_category: detections
event_data:
{"connection_id":1672788,"detection_time":1742012115,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":2178,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 64d3f94a-36ce-4ff5-8853-d830db994427
log_level: critical
event_category: detections
event_data:
{"connection_id":1672801,"detection_time":1742012121,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":51433,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 32971859-ca42-4904-bda4-0e5f07fe3283
log_level: critical
event_category: detections
event_data:
{"connection_id":1672946,"detection_time":1742012156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":15476,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3995e204-7339-44b6-8cfd-009fea2fd463
log_level: critical
event_category: detections
event_data:
{"connection_id":1672968,"detection_time":1742012162,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":7681,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7578bbf-7b14-4c59-b8da-235f985d162c
log_level: critical
event_category: detections
event_data:
{"connection_id":1672997,"detection_time":1742012169,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":57856,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 810c7840-852c-407e-a5cf-21aa697cc853
log_level: critical
event_category: detections
event_data:
{"connection_id":1673885,"detection_time":1742012436,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":36990,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9b15c36d-550f-4b4d-8ff7-7e81b3e7d29c
log_level: critical
event_category: detections
event_data:
{"connection_id":1673908,"detection_time":1742012442,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":26158,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5aa53848-a727-4d29-99cb-84ecdcff720b
log_level: critical
event_category: detections
event_data:
{"connection_id":1673941,"detection_time":1742012448,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":14922,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02ed60c6-53a2-4ad7-9de6-aaa2cf9626dc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012510,"event_type_id":6,"status":"blocked"}


event_id: a50597f4-ec59-401e-bbe0-23845be1014d
log_level: critical
event_category: detections
event_data:
{"connection_id":1674140,"detection_time":1742012510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60722,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 565a1c98-1712-4927-a6f1-85ab75a9a784
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012575,"event_type_id":6,"status":"blocked"}


event_id: 4ddecfd6-0f14-4e42-b89e-b290fcc2b2a6
log_level: critical
event_category: detections
event_data:
{"connection_id":1674391,"detection_time":1742012575,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46232,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: da6794c8-81d2-43ea-a4d6-74c44bbf3f70
log_level: critical
event_category: detections
event_data:
{"connection_id":1676331,"detection_time":1742013123,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":41914,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 259e3acf-98ac-4c22-9ea6-f39af049a446
log_level: critical
event_category: detections
event_data:
{"connection_id":1676358,"detection_time":1742013130,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":29115,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d8291432-f2e3-430f-a961-48dcb382b23c
log_level: critical
event_category: detections
event_data:
{"connection_id":1676382,"detection_time":1742013136,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":14885,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dc482a9a-4098-4adb-a316-f6d316666ac5
log_level: critical
event_category: detections
event_data:
{"connection_id":1677249,"detection_time":1742013375,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":36216,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c823069b-3547-4d07-a552-28ef24b3c5dd
log_level: critical
event_category: detections
event_data:
{"connection_id":1677278,"detection_time":1742013382,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":29338,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9ecc860d-8157-4a2e-ab17-07ce16e31589
log_level: critical
event_category: detections
event_data:
{"connection_id":1677295,"detection_time":1742013388,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":21489,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0334484c-0b43-42d2-8169-0438877b69df
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742013479,"event_type_id":6,"status":"blocked"}


event_id: c7726e7b-49d5-4c52-a182-21ff738f4551
log_level: critical
event_category: detections
event_data:
{"connection_id":1677588,"detection_time":1742013479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57743,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f34e6545-6300-4a12-8390-eb1351e3ce52
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742013579,"event_type_id":6,"status":"blocked"}


event_id: 41063013-f287-4f5f-8b06-88d719b09b86
log_level: critical
event_category: detections
event_data:
{"connection_id":1677918,"detection_time":1742013579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37312,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a22526cc-6faf-4792-b9bd-467a12d00348
log_level: critical
event_category: detections
event_data:
{"connection_id":1678288,"detection_time":1742013694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":34714,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 27037d26-aab9-4c99-98f4-74275b0321ba
log_level: critical
event_category: detections
event_data:
{"connection_id":1678306,"detection_time":1742013700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":26748,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f63073c9-7d90-4481-8cc7-0b5c3234d9ec
log_level: critical
event_category: detections
event_data:
{"connection_id":1678336,"detection_time":1742013707,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":17733,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 59cef686-5b67-48ef-ac1e-9e82eefa2b3c
log_level: critical
event_category: detections
event_data:
{"connection_id":1678361,"detection_time":1742013711,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":53872,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 22a50b6c-8b70-4bec-aee9-9956c1ad9dd8
log_level: critical
event_category: detections
event_data:
{"connection_id":1678381,"detection_time":1742013718,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":45461,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec0d2ab8-ec82-4838-ac2c-805e49b39028
log_level: critical
event_category: detections
event_data:
{"connection_id":1678404,"detection_time":1742013724,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":36558,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 63dba013-f99f-4a6e-b15a-64cb6d545423
log_level: critical
event_category: detections
event_data:
{"connection_id":1679124,"detection_time":1742013950,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":9719,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bd6eb62b-19f3-4349-a37b-1a0a65cf7c09
log_level: critical
event_category: detections
event_data:
{"connection_id":1679144,"detection_time":1742013956,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":58047,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dc000501-e578-4d5a-9b6c-67b48f66622d
log_level: critical
event_category: detections
event_data:
{"connection_id":1679170,"detection_time":1742013963,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":47390,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 802df919-0cb2-4bd5-aba5-669d21d2e67b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742014088,"event_type_id":6,"status":"blocked"}


event_id: 8ddf41df-78b4-41f2-b06a-4f442da0dae4
log_level: critical
event_category: detections
event_data:
{"connection_id":1679597,"detection_time":1742014088,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46561,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ae87b037-21de-4ec6-b3e6-26175245d75a
log_level: critical
event_category: detections
event_data:
{"connection_id":1679811,"detection_time":1742014159,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":2039,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 849e183f-8275-4151-a6bd-86f0cce42728
log_level: critical
event_category: detections
event_data:
{"connection_id":1679839,"detection_time":1742014166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":52028,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 26e0359a-181e-4e01-a949-7138620e7979
log_level: critical
event_category: detections
event_data:
{"connection_id":1679856,"detection_time":1742014172,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":43057,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 947bccf7-b39b-4f55-852a-8e888f0d8b8f
log_level: critical
event_category: detections
event_data:
{"connection_id":1680804,"detection_time":1742014464,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":9705,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30441789-d76e-47e9-baa5-4fe31ce73692
log_level: critical
event_category: detections
event_data:
{"connection_id":1680818,"detection_time":1742014470,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":1243,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ada84329-838a-456a-a9eb-80756c1f6dcb
log_level: critical
event_category: detections
event_data:
{"connection_id":1680832,"detection_time":1742014476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":51385,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 56f3d40b-4a39-4977-8dfe-7324a717b811
log_level: critical
event_category: detections
event_data:
{"connection_id":1680845,"detection_time":1742014481,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":48700,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bea5e23a-2303-4d8c-b4a2-1e2ebbac3935
log_level: critical
event_category: detections
event_data:
{"connection_id":1680865,"detection_time":1742014488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":40405,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 72532d8f-aa09-4ba1-9bf9-85883b7edb85
log_level: critical
event_category: detections
event_data:
{"connection_id":1680892,"detection_time":1742014494,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":31157,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e0389bbd-99fd-4438-9f52-c89b7d6f4c6d
log_level: critical
event_category: detections
event_data:
{"connection_id":1681063,"detection_time":1742014551,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":48621,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 07229026-857f-48fc-b7ae-99cab6812ed0
log_level: critical
event_category: detections
event_data:
{"connection_id":1681082,"detection_time":1742014557,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":39960,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e1bba5e6-0773-4f07-beb0-1d3830168b8c
log_level: critical
event_category: detections
event_data:
{"connection_id":1681110,"detection_time":1742014563,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":30674,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c06984b4-d4e3-4cfe-9f1f-32525246dd79
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742014585,"event_type_id":6,"status":"blocked"}


event_id: d59692e9-839a-4413-bd60-fb82ebe68987
log_level: critical
event_category: detections
event_data:
{"connection_id":1681184,"detection_time":1742014585,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55688,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d49ab91f-d0c2-47dd-a53b-3c96d02fb796
log_level: critical
event_category: detections
event_data:
{"connection_id":1681717,"detection_time":1742014765,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":47512,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 79d45c21-8b00-4056-ae75-e11aa4744f97
log_level: critical
event_category: detections
event_data:
{"connection_id":1681733,"detection_time":1742014772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":38234,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 208d371c-fb32-4b23-b999-25391bf49111
log_level: critical
event_category: detections
event_data:
{"connection_id":1681763,"detection_time":1742014778,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":29147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5e6511ab-3f60-43eb-93d4-8dce7e7a0984
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742015087,"event_type_id":6,"status":"blocked"}


event_id: 692b10a9-9d09-4107-918f-1e38ed51697e
log_level: critical
event_category: detections
event_data:
{"connection_id":1682842,"detection_time":1742015087,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a5a4176e-48a4-4227-9b9c-0fcb9342ab02
log_level: critical
event_category: detections
event_data:
{"connection_id":1682849,"detection_time":1742015088,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":45187,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 21fb3d46-9e2a-4ab8-8d9c-214fd1bc46da
log_level: critical
event_category: detections
event_data:
{"connection_id":1682865,"detection_time":1742015094,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":30333,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8a4d7a6c-1cf6-4280-805f-73eda82df91d
log_level: critical
event_category: detections
event_data:
{"connection_id":1682902,"detection_time":1742015100,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":19334,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 00a8570f-2a65-49f8-8458-f3ac9ae9e331
log_level: critical
event_category: detections
event_data:
{"connection_id":1683711,"detection_time":1742015341,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":51114,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c378f2b6-8cfd-482e-94e4-370af2611e6d
log_level: critical
event_category: detections
event_data:
{"connection_id":1683730,"detection_time":1742015348,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":43222,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14b57928-c498-440d-80ca-e4f4a10d0bd4
log_level: critical
event_category: detections
event_data:
{"connection_id":1683752,"detection_time":1742015354,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":32566,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6a1f15f8-b32f-4068-b729-ec314c8028e6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742015423,"event_type_id":6,"status":"blocked"}


event_id: 5b262512-44f3-4493-85e6-f9cb9f0fd5c5
log_level: critical
event_category: detections
event_data:
{"connection_id":1683985,"detection_time":1742015423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52974,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 47b9b6ff-caea-4774-8fb2-d928407b8db0
log_level: critical
event_category: detections
event_data:
{"connection_id":1684378,"detection_time":1742015545,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":3365,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c35a91b1-6061-4ac9-955f-52d295d0b87f
log_level: critical
event_category: detections
event_data:
{"connection_id":1684390,"detection_time":1742015552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":53066,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cb3fd9c2-23d8-4fec-b64f-bb6e96ee884f
log_level: critical
event_category: detections
event_data:
{"connection_id":1684406,"detection_time":1742015558,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":42988,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 82261f86-a5b3-4410-abe9-c8d653e6d547
log_level: critical
event_category: detections
event_data:
{"connection_id":1685341,"detection_time":1742015841,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":59030,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86717cfa-48de-4b3c-a48a-7811b10bdc2f
log_level: critical
event_category: detections
event_data:
{"connection_id":1685356,"detection_time":1742015848,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":48766,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cbaaacd0-80d6-4ae4-89d4-752549d023fc
log_level: critical
event_category: detections
event_data:
{"connection_id":1685382,"detection_time":1742015854,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":38698,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 13ed2b4d-c13e-41eb-bad1-ac70e0a7cf64
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742015917,"event_type_id":6,"status":"blocked"}


event_id: 85d21573-a3eb-43cd-854c-c53506a55164
log_level: critical
event_category: detections
event_data:
{"connection_id":1685565,"detection_time":1742015917,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52051,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9855d5f8-0496-4466-8a65-325304d4d2db
log_level: critical
event_category: detections
event_data:
{"connection_id":1685847,"detection_time":1742016001,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":44777,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4466f62d-6550-43bc-9db4-38f8dab05193
log_level: critical
event_category: detections
event_data:
{"connection_id":1685872,"detection_time":1742016007,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":35902,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 439377d0-d44f-48d9-b5ee-b30bf12b5421
log_level: critical
event_category: detections
event_data:
{"connection_id":1685901,"detection_time":1742016013,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":27092,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7767caeb-387d-40d1-b529-b7cbb33fd0ac
log_level: critical
event_category: detections
event_data:
{"connection_id":1686597,"detection_time":1742016242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":34396,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30a49194-f072-4f1a-9d44-9e77bb31829d
log_level: critical
event_category: detections
event_data:
{"connection_id":1686633,"detection_time":1742016248,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":24468,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c0c8a2e3-00c8-4e5d-8341-fcf3b9798617
log_level: critical
event_category: detections
event_data:
{"connection_id":1686651,"detection_time":1742016255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":14300,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 70e98ebe-ad4b-444d-8b6c-043e5ee3edba
log_level: critical
event_category: detections
event_data:
{"connection_id":1686684,"detection_time":1742016266,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":39737,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fdc8c26d-416e-4c18-b382-c64d96d5267f
log_level: critical
event_category: detections
event_data:
{"connection_id":1686704,"detection_time":1742016272,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":26083,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0805ee43-8fb5-4777-82e3-b11a005c8b2b
log_level: critical
event_category: detections
event_data:
{"connection_id":1686721,"detection_time":1742016278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":12013,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f2aad61-981b-443d-90f6-5c7df32588de
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742016596,"event_type_id":6,"status":"blocked"}


event_id: a0bd6e6b-716b-4e4f-9847-bac3b2c8618a
log_level: critical
event_category: detections
event_data:
{"connection_id":1687776,"detection_time":1742016596,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36154,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a83bf94-42b2-4acb-a0ce-c5c9e7bb4e91
log_level: critical
event_category: detections
event_data:
{"connection_id":1687824,"detection_time":1742016610,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":49152,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 44871d90-9e80-4b8a-aa1b-d7bf37584b8a
log_level: critical
event_category: detections
event_data:
{"connection_id":1687843,"detection_time":1742016616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":35835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7a97d431-b608-46ab-9066-bfb6f41c4950
log_level: critical
event_category: detections
event_data:
{"connection_id":1687856,"detection_time":1742016623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":21997,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5e45c62-cb1a-444e-85d8-b7628c25b16e
log_level: critical
event_category: detections
event_data:
{"connection_id":1688755,"detection_time":1742016868,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":49196,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3d2fce5a-b51d-4207-b090-7fe3a515efee
log_level: critical
event_category: detections
event_data:
{"connection_id":1688770,"detection_time":1742016875,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":39250,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 36e42705-7509-4c85-bb0f-6d27e0146f6c
log_level: critical
event_category: detections
event_data:
{"connection_id":1688784,"detection_time":1742016881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":28546,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c2d469f-fecd-4d7b-8120-1034c4dec745
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742016885,"event_type_id":6,"status":"blocked"}


event_id: 36f38c34-cc13-459e-ae13-ddc9a921ac29
log_level: critical
event_category: detections
event_data:
{"connection_id":1688809,"detection_time":1742016885,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49372,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a3a01a5-1177-41a2-af2d-f8ada0ec2aa2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742017104,"event_type_id":6,"status":"blocked"}


event_id: 30c554d2-86c2-4753-8e81-b013d684da6b
log_level: critical
event_category: detections
event_data:
{"connection_id":1689528,"detection_time":1742017104,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45287,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb6008f6-1dbd-46da-b769-5525ed87a310
log_level: critical
event_category: detections
event_data:
{"connection_id":1690592,"detection_time":1742017434,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":28478,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: db1c0a4b-cad8-4674-a9b6-97debdb039a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1690605,"detection_time":1742017440,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":19175,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 56a884f3-2653-4c98-84c5-79a76c5d847b
log_level: critical
event_category: detections
event_data:
{"connection_id":1690631,"detection_time":1742017447,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":9771,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc02c2da-f181-4104-8309-539d2f5c72b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742017600,"event_type_id":6,"status":"blocked"}


event_id: 5d3da96a-ce4b-48b2-928f-c326d8d1e93f
log_level: critical
event_category: detections
event_data:
{"connection_id":1691137,"detection_time":1742017600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54568,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c10b65eb-7b83-4e9c-9e70-0322d969c35c
log_level: critical
event_category: detections
event_data:
{"connection_id":1691201,"detection_time":1742017624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":30532,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7f7a8bd0-0fed-41e3-9ede-7a4d7a789fcc
log_level: critical
event_category: detections
event_data:
{"connection_id":1691242,"detection_time":1742017630,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":19352,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 003c2876-1365-4449-8432-44042ae2d9c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1691263,"detection_time":1742017637,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":6833,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 351d7db0-c6fd-404d-bd28-5ca54ef82dcc
log_level: critical
event_category: detections
event_data:
{"connection_id":1691403,"detection_time":1742017685,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":6034,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8d4142e9-4d9f-42d4-8e3c-b6986c45b3d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1691427,"detection_time":1742017692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":53658,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e9ab8883-48ea-4598-b8ca-7c3e06f6d9b9
log_level: critical
event_category: detections
event_data:
{"connection_id":1691443,"detection_time":1742017698,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":41618,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2e75644f-7dd4-46bb-8d45-5afbe71a779d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742017853,"event_type_id":6,"status":"blocked"}


event_id: 49f69c58-bcdc-49a3-bf8d-a736a64a024f
log_level: critical
event_category: detections
event_data:
{"connection_id":1691927,"detection_time":1742017853,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46246,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a99dea8-ec10-4faa-a1f3-34276876115a
log_level: critical
event_category: detections
event_data:
{"connection_id":1692212,"detection_time":1742017947,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":38971,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bfd0df87-8165-4fd6-a179-4c3e46e9604b
log_level: critical
event_category: detections
event_data:
{"connection_id":1692232,"detection_time":1742017953,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":29153,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b3550c8-3f89-4083-a19f-b3991e2c9a71
log_level: critical
event_category: detections
event_data:
{"connection_id":1692253,"detection_time":1742017959,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":20074,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2f29f9ab-7d83-461e-bccf-0b778dae9b4f
log_level: critical
event_category: detections
event_data:
{"connection_id":1692696,"detection_time":1742018108,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":23006,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e5041a8e-8f45-47e9-8269-a5508ae0e381
log_level: critical
event_category: detections
event_data:
{"connection_id":1692725,"detection_time":1742018115,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":14272,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9f1a94f9-222c-439d-b292-dbac4ebd0c83
log_level: critical
event_category: detections
event_data:
{"connection_id":1692737,"detection_time":1742018121,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":4446,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c6f9d3f4-100d-41a7-965b-5da58805c568
log_level: critical
event_category: detections
event_data:
{"connection_id":1693136,"detection_time":1742018242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":57252,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2c2abf0a-a4a4-49ef-9a62-54a8b4271960
log_level: critical
event_category: detections
event_data:
{"connection_id":1693156,"detection_time":1742018248,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":43904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 18a6f035-7b09-4697-8082-1eacb0d2ef59
log_level: critical
event_category: detections
event_data:
{"connection_id":1693172,"detection_time":1742018255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":30158,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff8b6c80-b3ac-4b56-9538-cbc35b40bbd6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742018342,"event_type_id":6,"status":"blocked"}


event_id: 5c41af44-aa63-487d-a8b4-1013889f9f1f
log_level: critical
event_category: detections
event_data:
{"connection_id":1693437,"detection_time":1742018342,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44932,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82a6d6c4-f6b4-4618-ad46-993a625fe945
log_level: critical
event_category: detections
event_data:
{"connection_id":1694754,"detection_time":1742018700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":47026,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 71808fea-3b4b-49f2-a2f1-357cbda31cf9
log_level: critical
event_category: detections
event_data:
{"connection_id":1694775,"detection_time":1742018706,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":34415,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e6c869c5-df35-42b1-a914-869fa0eb3ee8
log_level: critical
event_category: detections
event_data:
{"connection_id":1694804,"detection_time":1742018712,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":21277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 44d1b455-80f0-4ea9-8f62-13cab9fa1f35
log_level: critical
event_category: detections
event_data:
{"connection_id":1695387,"detection_time":1742018886,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":20795,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e0f99a0a-f899-4b8b-b517-1e25f41d30bb
log_level: critical
event_category: detections
event_data:
{"connection_id":1695404,"detection_time":1742018892,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":10768,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 75a62387-68c8-4ee4-8a28-1f8d7cbd8499
log_level: critical
event_category: detections
event_data:
{"connection_id":1695416,"detection_time":1742018896,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":21125,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 36316169-453c-4729-b4d3-c735db8c7c79
log_level: critical
event_category: detections
event_data:
{"connection_id":1695420,"detection_time":1742018899,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":59164,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5163f4ea-473a-4f98-bf87-5dd7f4c5d054
log_level: critical
event_category: detections
event_data:
{"connection_id":1695431,"detection_time":1742018903,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":7728,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8c40324f-fda2-4296-8015-ba79a368073f
log_level: critical
event_category: detections
event_data:
{"connection_id":1695466,"detection_time":1742018909,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":52589,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b213bf6c-39fb-4761-9d69-052d2c368e85
log_level: critical
event_category: detections
event_data:
{"connection_id":1695998,"detection_time":1742019067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":34612,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e4d23648-8626-41b1-bf7e-660c58648e1b
log_level: critical
event_category: detections
event_data:
{"connection_id":1696015,"detection_time":1742019073,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":19949,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4040b3b9-f1ed-419d-9493-7067e4f010d7
log_level: critical
event_category: detections
event_data:
{"connection_id":1696040,"detection_time":1742019080,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":5748,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 78727bdc-7c57-4a8f-827a-7fc336cff0a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742019113,"event_type_id":6,"status":"blocked"}


event_id: 54a53203-ac55-4f3e-971f-438367f7ee87
log_level: critical
event_category: detections
event_data:
{"connection_id":1696136,"detection_time":1742019113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55428,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c37aa83b-6f56-444f-aff2-9827bd665563
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742019313,"event_type_id":6,"status":"blocked"}


event_id: 894e0343-13ff-44e6-a735-03370276dd28
log_level: critical
event_category: detections
event_data:
{"connection_id":1696793,"detection_time":1742019313,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41931,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2af23c53-4c29-4bc3-a820-4a0c40c8ef23
log_level: critical
event_category: detections
event_data:
{"connection_id":1696825,"detection_time":1742019326,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":6617,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee7d5511-5c9f-49c1-876b-f2b03e209465
log_level: critical
event_category: detections
event_data:
{"connection_id":1696846,"detection_time":1742019332,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":51688,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f6aef794-4ff6-4252-9450-a948ac6b3933
log_level: critical
event_category: detections
event_data:
{"connection_id":1696862,"detection_time":1742019339,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":37113,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac5018de-ea34-4394-bd84-f9ca1200968a
log_level: critical
event_category: detections
event_data:
{"connection_id":1697252,"detection_time":1742019452,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":51850,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d3eb8017-45d1-4e4f-b698-dcd67de6a338
log_level: critical
event_category: detections
event_data:
{"connection_id":1697274,"detection_time":1742019458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":43164,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60af33b8-02f2-4d7a-beb3-123d321a08b3
log_level: critical
event_category: detections
event_data:
{"connection_id":1697286,"detection_time":1742019465,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":33544,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f29c2c2f-5a64-4b01-9f2a-fe4db5d00d97
log_level: critical
event_category: detections
event_data:
{"connection_id":1697619,"detection_time":1742019566,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":24029,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 32952995-3221-42aa-9b56-9527a062cd71
log_level: critical
event_category: detections
event_data:
{"connection_id":1697637,"detection_time":1742019572,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":14406,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ed14e406-de89-4425-88c1-79802c0e2cce
log_level: critical
event_category: detections
event_data:
{"connection_id":1697658,"detection_time":1742019579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":4333,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5b2f9714-5902-48f0-86d1-4ffdf5697314
log_level: critical
event_category: detections
event_data:
{"connection_id":1697906,"detection_time":1742019656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":59176,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1bff0594-47b9-4607-b497-5e5af641300c
log_level: critical
event_category: detections
event_data:
{"connection_id":1697944,"detection_time":1742019662,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":50419,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c5e850f-8f91-4e0c-866e-cf1854c9454d
log_level: critical
event_category: detections
event_data:
{"connection_id":1697966,"detection_time":1742019669,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":41132,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dd93e373-9ef8-4d28-a614-cd942e568970
log_level: critical
event_category: detections
event_data:
{"connection_id":1698250,"detection_time":1742019762,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":15608,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 75a4289e-dc9b-4c3a-a6ab-deccfd69cb62
log_level: critical
event_category: detections
event_data:
{"connection_id":1698275,"detection_time":1742019769,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":6324,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f55e4e6-e445-4895-b4c7-5123352b8770
log_level: critical
event_category: detections
event_data:
{"connection_id":1698291,"detection_time":1742019775,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":56249,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d0a4ffcc-93aa-4b24-8890-3cbe531b6122
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742019797,"event_type_id":6,"status":"blocked"}


event_id: 0431fa76-03fe-4ff2-ad20-b38acd0ae1c9
log_level: critical
event_category: detections
event_data:
{"connection_id":1698371,"detection_time":1742019797,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40940,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e7d9bb0e-18c5-40df-9f90-e48d34e36510
log_level: critical
event_category: detections
event_data:
{"connection_id":1698776,"detection_time":1742019926,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.37.69.105","remote_port":65204,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ce96a18f-9e93-4ff4-8fdc-1b82c66d855b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742020117,"event_type_id":6,"status":"blocked"}


event_id: c69e4280-13ca-4355-a7dd-d8ba5de94c01
log_level: critical
event_category: detections
event_data:
{"connection_id":1699394,"detection_time":1742020117,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45191,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92b9efed-1629-431d-a614-6dc9ab26444a
log_level: critical
event_category: detections
event_data:
{"connection_id":1699902,"detection_time":1742020278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":27114,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ab7660b6-2be6-49ee-955c-101cb34fb071
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742020282,"event_type_id":6,"status":"blocked"}


event_id: f6b86550-9e06-481a-a364-cddd123ea91a
log_level: critical
event_category: detections
event_data:
{"connection_id":1699912,"detection_time":1742020282,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39646,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 961ee8fd-8fa6-4485-b941-e313b0358786
log_level: critical
event_category: detections
event_data:
{"connection_id":1699918,"detection_time":1742020284,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":17491,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d0706f0c-8adc-4fe5-b2a4-4e678c28334c
log_level: critical
event_category: detections
event_data:
{"connection_id":1699951,"detection_time":1742020291,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":6299,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f886a5bf-0e45-4e2d-968f-60decf4f115b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742020620,"event_type_id":6,"status":"blocked"}


event_id: adbcc9cf-e615-4c09-91f3-616b9e5b0e1f
log_level: critical
event_category: detections
event_data:
{"connection_id":1701112,"detection_time":1742020620,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54561,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: beab8abb-c0f2-4680-a5d3-d6bc7f805ef7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742021127,"event_type_id":6,"status":"blocked"}


event_id: 84105cc7-4ea0-4df5-a69b-870f5fe0235c
log_level: critical
event_category: detections
event_data:
{"connection_id":1702741,"detection_time":1742021127,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35641,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 89b1c5f5-54be-47eb-9022-dbce043e1986
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742021258,"event_type_id":6,"status":"blocked"}


event_id: 2b1fa755-864b-4ca9-9a14-9f1091cbd0fa
log_level: critical
event_category: detections
event_data:
{"connection_id":1703175,"detection_time":1742021258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36833,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 20e054ac-1448-408e-957f-cbb28a801a98
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742021622,"event_type_id":6,"status":"blocked"}


event_id: 0c784ba2-4e3e-4439-817b-0ce3c4788112
log_level: critical
event_category: detections
event_data:
{"connection_id":1704343,"detection_time":1742021622,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44634,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca5ad679-6949-45fa-8b1c-b4e1cdb5e8dd
log_level: critical
event_category: detections
event_data:
{"connection_id":1705437,"detection_time":1742021951,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":15781,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 69c7afc8-7e55-491c-a002-00f4923113b4
log_level: critical
event_category: detections
event_data:
{"connection_id":1705453,"detection_time":1742021957,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":5835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9c65b266-e4a4-4a6d-a17d-50e14917c380
log_level: critical
event_category: detections
event_data:
{"connection_id":1705467,"detection_time":1742021964,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":56583,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4cf12b51-24d3-4262-ade9-6291c730e108
log_level: critical
event_category: detections
event_data:
{"connection_id":1705720,"detection_time":1742022038,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":28593,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4cb02d1e-68a0-44f8-8ef9-404301768d05
log_level: critical
event_category: detections
event_data:
{"connection_id":1705739,"detection_time":1742022044,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":14818,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: afe1939d-a59f-4247-9474-bb9d3f7039e5
log_level: critical
event_category: detections
event_data:
{"connection_id":1705760,"detection_time":1742022051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":1120,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c87920b-fce9-4ad8-93d8-9712cc4cfbea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022124,"event_type_id":6,"status":"blocked"}


event_id: 6cd6e37b-40e4-403a-bc96-d5dbdaddcfcb
log_level: critical
event_category: detections
event_data:
{"connection_id":1706034,"detection_time":1742022124,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53860,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1090cc12-9514-4fe5-a1c1-f8f12626974a
log_level: critical
event_category: detections
event_data:
{"connection_id":1706135,"detection_time":1742022144,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":38029,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 835179a4-f3fe-406d-bafe-e2e05ff2f992
log_level: critical
event_category: detections
event_data:
{"connection_id":1706159,"detection_time":1742022151,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":24559,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5cf1ed71-6708-4436-93b1-f645f148ec55
log_level: critical
event_category: detections
event_data:
{"connection_id":1706175,"detection_time":1742022157,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":12843,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d5d35806-5870-43d9-9dbc-ea3fac94fae0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022227,"event_type_id":6,"status":"blocked"}


event_id: 350f061c-89c9-43fc-866d-efdec2d5c2b6
log_level: critical
event_category: detections
event_data:
{"connection_id":1706457,"detection_time":1742022227,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34677,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b887c188-f4f8-4147-94e5-f5ae71676c60
log_level: critical
event_category: detections
event_data:
{"connection_id":1707532,"detection_time":1742022555,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":40314,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a66ffd74-3a3a-4bfe-8eec-01e8e7d285f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1707544,"detection_time":1742022561,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":31312,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f385fc03-70aa-4808-b434-ba8c7e18a26e
log_level: critical
event_category: detections
event_data:
{"connection_id":1707565,"detection_time":1742022568,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":21660,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1e956be0-e9eb-4a1c-92a2-997f7732602a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022626,"event_type_id":6,"status":"blocked"}


event_id: cb8bc610-ff6d-4237-9c39-4654deb51127
log_level: critical
event_category: detections
event_data:
{"connection_id":1707795,"detection_time":1742022626,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34391,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c987e56-ed21-439f-b1e1-227912e1ab66
log_level: critical
event_category: detections
event_data:
{"connection_id":1707834,"detection_time":1742022638,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":31834,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac2462c9-bc6a-4c2c-8f46-8e72e9dc056f
log_level: critical
event_category: detections
event_data:
{"connection_id":1707852,"detection_time":1742022644,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":22162,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 53febe7c-c109-4e83-ae66-d3b82b10714a
log_level: critical
event_category: detections
event_data:
{"connection_id":1707866,"detection_time":1742022650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":12093,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 926ed613-e652-471c-926b-a993d78f3f9d
log_level: critical
event_category: detections
event_data:
{"connection_id":1708014,"detection_time":1742022695,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":50002,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 78494087-2944-46d1-85ab-afb6dac2e606
log_level: critical
event_category: detections
event_data:
{"connection_id":1708031,"detection_time":1742022702,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":36014,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c3bf048-2597-40c7-9420-f131c59b673e
log_level: critical
event_category: detections
event_data:
{"connection_id":1708066,"detection_time":1742022708,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":21386,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ba2e9d9-3633-46e6-8c85-6f92a8a84aab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022716,"event_type_id":6,"status":"blocked"}


event_id: 16d086e6-4368-48b9-89f7-1c3e0f8f50c4
log_level: critical
event_category: detections
event_data:
{"connection_id":1708083,"detection_time":1742022716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33584,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2fa89f68-2e90-47bc-81af-2b1a10068328
log_level: critical
event_category: detections
event_data:
{"connection_id":1708627,"detection_time":1742022884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":38868,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f5768cba-68a8-4588-8648-ab9278795896
log_level: critical
event_category: detections
event_data:
{"connection_id":1708660,"detection_time":1742022890,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":30150,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9381f9bf-5893-44de-95dd-8a62cf71380c
log_level: critical
event_category: detections
event_data:
{"connection_id":1708683,"detection_time":1742022897,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":19954,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ce41040c-85e0-4f99-a060-abd9fc8dbacc
log_level: critical
event_category: detections
event_data:
{"connection_id":1708865,"detection_time":1742022944,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":29366,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14a1b3a3-478e-44ac-ba09-3b1e24ab945a
log_level: critical
event_category: detections
event_data:
{"connection_id":1708886,"detection_time":1742022951,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":19930,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee159477-cdfd-4d28-a518-75381a3677c8
log_level: critical
event_category: detections
event_data:
{"connection_id":1708902,"detection_time":1742022957,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":10114,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7d6319f-eb69-45a2-8a94-7e9b40fc586f
log_level: critical
event_category: detections
event_data:
{"connection_id":1709341,"detection_time":1742023093,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":42040,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bb4eb7e0-15f1-4339-b941-d305452deca5
log_level: critical
event_category: detections
event_data:
{"connection_id":1709372,"detection_time":1742023100,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":28453,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec2da1c7-0571-4874-b89a-1cb025c59ae5
log_level: critical
event_category: detections
event_data:
{"connection_id":1709390,"detection_time":1742023106,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":15068,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0696d5ab-3d45-47f4-87a3-cc955c92a06c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742023135,"event_type_id":6,"status":"blocked"}


event_id: d54aedfd-f6b5-476c-9a09-253f05f33455
log_level: critical
event_category: detections
event_data:
{"connection_id":1709487,"detection_time":1742023135,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43480,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3686cce1-53ad-4f43-952f-cb858eee4cd3
log_level: critical
event_category: detections
event_data:
{"connection_id":1709962,"detection_time":1742023280,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":30685,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5756c98d-5580-4bc7-85bc-8439fea7c1a4
log_level: critical
event_category: detections
event_data:
{"connection_id":1709977,"detection_time":1742023286,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":21362,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f61d08f9-3dec-49ed-9aed-cdaefaced08e
log_level: critical
event_category: detections
event_data:
{"connection_id":1710010,"detection_time":1742023293,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":11822,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 00e1e043-3ce7-4f8f-8c84-848540f3ec16
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742023633,"event_type_id":6,"status":"blocked"}


event_id: 5f317ba1-a1f5-4cf6-8a01-66bb6471dd67
log_level: critical
event_category: detections
event_data:
{"connection_id":1711174,"detection_time":1742023633,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52044,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83184f8a-62f9-434a-8e62-561e733ca709
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742023689,"event_type_id":6,"status":"blocked"}


event_id: 09101763-d15a-4224-b63c-a91eafce1002
log_level: critical
event_category: detections
event_data:
{"connection_id":1711381,"detection_time":1742023689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60073,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bea18e20-3dd8-4434-8ffd-3de9b6eaac38
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024140,"event_type_id":6,"status":"blocked"}


event_id: bcb680c8-334e-41dd-b7a1-8deae8a242d2
log_level: critical
event_category: detections
event_data:
{"connection_id":1713130,"detection_time":1742024140,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60951,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7279b213-53e6-4889-899b-2334ffa8badf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024174,"event_type_id":6,"status":"blocked"}


event_id: 96d025e4-1629-4e44-9682-c99ed0e30020
log_level: critical
event_category: detections
event_data:
{"connection_id":1713257,"detection_time":1742024174,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58667,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e4922cd9-7469-4558-85a5-34fde1a66ca6
log_level: critical
event_category: detections
event_data:
{"connection_id":1713640,"detection_time":1742024283,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":43753,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 70f8901a-9ced-45e2-8725-7b8124715555
log_level: critical
event_category: detections
event_data:
{"connection_id":1713673,"detection_time":1742024290,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":30442,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 56133569-cb32-4304-a001-f67bc385a611
log_level: critical
event_category: detections
event_data:
{"connection_id":1713695,"detection_time":1742024296,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":16535,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5b8783ac-e1b8-4561-8e67-0eaaf1803e9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024637,"event_type_id":6,"status":"blocked"}


event_id: 302adfd5-0bf5-4bd3-8a19-b523b54d2c4a
log_level: critical
event_category: detections
event_data:
{"connection_id":1714913,"detection_time":1742024637,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42186,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2901c634-089a-435d-a188-0271d2295e34
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024661,"event_type_id":6,"status":"blocked"}


event_id: 8e3410b9-6622-4088-910f-f0c780dcc057
log_level: critical
event_category: detections
event_data:
{"connection_id":1715006,"detection_time":1742024661,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57410,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dcd7ca12-11fa-4b90-8a4a-cdcd40eea6be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742025147,"event_type_id":6,"status":"blocked"}


event_id: 1461968e-a2c1-482e-b40f-2bba8611db1d
log_level: critical
event_category: detections
event_data:
{"connection_id":1716716,"detection_time":1742025147,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51486,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c681fde3-d691-4a26-895d-bf873b333f71
log_level: critical
event_category: detections
event_data:
{"connection_id":1717978,"detection_time":1742025506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":59469,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bba2af2c-516f-4001-8376-73d45ac15042
log_level: critical
event_category: detections
event_data:
{"connection_id":1717996,"detection_time":1742025513,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":46228,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d1904634-7d71-4fd2-b652-f6ce6707650f
log_level: critical
event_category: detections
event_data:
{"connection_id":1718008,"detection_time":1742025519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":32320,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2807c73-c216-4d1c-a147-9c0892051d8b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742025645,"event_type_id":6,"status":"blocked"}


event_id: df1384c6-3f24-43db-9285-51336353bcc4
log_level: critical
event_category: detections
event_data:
{"connection_id":1718450,"detection_time":1742025645,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33524,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 111845d5-2406-4e25-b019-514dfacab617
log_level: critical
event_category: detections
event_data:
{"connection_id":1718599,"detection_time":1742025683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":51147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98989875-1984-4228-afd6-7e5199f10713
log_level: critical
event_category: detections
event_data:
{"connection_id":1718601,"detection_time":1742025683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":28427,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9bd7dc72-6536-4d3d-ada0-c3554c47a64a
log_level: critical
event_category: detections
event_data:
{"connection_id":1718611,"detection_time":1742025687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":9163,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 01c7cfd1-cdb4-40b5-b4e9-36fc6fd1a890
log_level: critical
event_category: detections
event_data:
{"connection_id":1718614,"detection_time":1742025689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":39956,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d40800ac-70ea-41a7-bd22-b251978cb0db
log_level: critical
event_category: detections
event_data:
{"connection_id":1718618,"detection_time":1742025689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":18393,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 49680a88-e861-40d0-a733-c1d7c3394553
log_level: critical
event_category: detections
event_data:
{"connection_id":1718637,"detection_time":1742025694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":1139,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 43fdc8ca-ee45-4eb4-8d78-51c368702c25
log_level: critical
event_category: detections
event_data:
{"connection_id":1718654,"detection_time":1742025695,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":28615,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4a532034-a1a6-44d9-8477-b3e37e7704b9
log_level: critical
event_category: detections
event_data:
{"connection_id":1718660,"detection_time":1742025696,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":8814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 800d06b0-e92d-4fe3-9ffd-0372a1072e1d
log_level: critical
event_category: detections
event_data:
{"connection_id":1718670,"detection_time":1742025700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":52807,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e5b66cad-189e-46d6-a634-a1f1fd373867
log_level: critical
event_category: detections
event_data:
{"connection_id":1719326,"detection_time":1742025856,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":41147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bbbe5db0-36e4-4926-899e-a2d5aa968ca3
log_level: critical
event_category: detections
event_data:
{"connection_id":1719344,"detection_time":1742025862,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":31679,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a4386497-756e-4eae-8779-f073ad115db2
log_level: critical
event_category: detections
event_data:
{"connection_id":1719365,"detection_time":1742025869,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":21494,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 719bd7ba-82d1-497e-8534-74f3d74710b2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742026124,"event_type_id":6,"status":"blocked"}


event_id: 765e0d98-3b3a-4e5f-8bf6-950951b91fae
log_level: critical
event_category: detections
event_data:
{"connection_id":1720272,"detection_time":1742026124,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51698,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 696445c2-9d17-4287-b813-535d01fcb374
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742026148,"event_type_id":6,"status":"blocked"}


event_id: 0089e6d9-7799-4e5a-9b1d-40019ac2b83c
log_level: critical
event_category: detections
event_data:
{"connection_id":1720358,"detection_time":1742026148,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43846,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6b47e615-522e-4adb-bfe2-fe3828d2c4a0
log_level: critical
event_category: detections
event_data:
{"connection_id":1721267,"detection_time":1742026424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":11852,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c311ecf-a1dc-495e-8f87-7b35e6cd9e74
log_level: critical
event_category: detections
event_data:
{"connection_id":1721286,"detection_time":1742026431,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":2951,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fe65ef52-82f1-4014-8f50-e59e31f758d0
log_level: critical
event_category: detections
event_data:
{"connection_id":1721304,"detection_time":1742026437,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":52835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0de58ab9-94f7-40b0-ae87-d9eda67e2214
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742026655,"event_type_id":6,"status":"blocked"}


event_id: 412b8d6d-6af3-4134-b473-29b0e11cd874
log_level: critical
event_category: detections
event_data:
{"connection_id":1722035,"detection_time":1742026655,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53406,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 53fed498-aebf-4364-9eb5-44ad50eb017e
log_level: critical
event_category: detections
event_data:
{"connection_id":1722549,"detection_time":1742026802,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":44862,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 21425570-0884-43b7-80dc-3a49b09a2a2d
log_level: critical
event_category: detections
event_data:
{"connection_id":1722573,"detection_time":1742026808,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":35583,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 46556089-26d3-488d-bec5-6200898697b3
log_level: critical
event_category: detections
event_data:
{"connection_id":1722600,"detection_time":1742026814,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":24317,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d33189da-3744-4e97-b9f3-51d064261b62
log_level: critical
event_category: detections
event_data:
{"connection_id":1722754,"detection_time":1742026868,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":45839,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 529d3beb-6e52-4457-bb01-e57faa2db18f
log_level: critical
event_category: detections
event_data:
{"connection_id":1722772,"detection_time":1742026874,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":36518,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7a01cc8d-58ba-40de-93db-8aea7269fc76
log_level: critical
event_category: detections
event_data:
{"connection_id":1722788,"detection_time":1742026878,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":21904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f77684df-5ec2-4a94-925e-995b42524142
log_level: critical
event_category: detections
event_data:
{"connection_id":1722797,"detection_time":1742026881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":27192,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d1abdb8d-9a2e-471d-96e2-d84ae50662cc
log_level: critical
event_category: detections
event_data:
{"connection_id":1722811,"detection_time":1742026884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":10602,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86812719-dd55-40e0-a3f4-63e7ac0cd6ad
log_level: critical
event_category: detections
event_data:
{"connection_id":1722845,"detection_time":1742026891,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":57056,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 248e8f37-20de-42b2-b469-3611b107e230
log_level: critical
event_category: detections
event_data:
{"connection_id":1723496,"detection_time":1742027086,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":39296,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b857b6bf-410b-4464-b4a5-8f2a8dde5eef
log_level: critical
event_category: detections
event_data:
{"connection_id":1723510,"detection_time":1742027092,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":24980,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 81bb730e-6a55-4bae-a544-d89c7e6d6a8e
log_level: critical
event_category: detections
event_data:
{"connection_id":1723530,"detection_time":1742027098,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":39355,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30e4e80e-2188-47a3-9f86-be62b9d738f2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742027162,"event_type_id":6,"status":"blocked"}


event_id: dd0fe9d1-11b1-4074-86fa-ecb11d20eea1
log_level: critical
event_category: detections
event_data:
{"connection_id":1723707,"detection_time":1742027162,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33906,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4683fd01-d654-48ac-91cf-52f63ad77dbb
log_level: critical
event_category: detections
event_data:
{"connection_id":1724258,"detection_time":1742027329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":52721,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec9847c2-5461-404d-af3a-e56bc04f7b54
log_level: critical
event_category: detections
event_data:
{"connection_id":1724275,"detection_time":1742027335,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":43277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e672a154-4349-4696-ba38-dea3db43f01a
log_level: critical
event_category: detections
event_data:
{"connection_id":1724293,"detection_time":1742027342,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":33773,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 202147b1-4284-4c81-abf3-a8f1b23386ae
log_level: critical
event_category: detections
event_data:
{"connection_id":1725027,"detection_time":1742027552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":3280,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b0ec498e-1069-4b3e-9aa6-54d3f92fec36
log_level: critical
event_category: detections
event_data:
{"connection_id":1725058,"detection_time":1742027558,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":52363,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 67f0b793-991c-4c61-943e-7e930af6b707
log_level: critical
event_category: detections
event_data:
{"connection_id":1725081,"detection_time":1742027565,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":43367,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ffcb1ac7-2156-475c-991f-c24abb580cda
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742027665,"event_type_id":6,"status":"blocked"}


event_id: e2c74bf5-8740-4e22-9025-d6ef400f6e9d
log_level: critical
event_category: detections
event_data:
{"connection_id":1725461,"detection_time":1742027665,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43718,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf531d0d-2a7e-4f56-a8e3-a522c124516c
log_level: critical
event_category: detections
event_data:
{"connection_id":1725993,"detection_time":1742027825,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":26277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e120e465-20a8-4cf8-990a-a34950b30c07
log_level: critical
event_category: detections
event_data:
{"connection_id":1726020,"detection_time":1742027831,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":17538,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e94025d0-837b-4bdf-89c6-8cbece12cbe3
log_level: critical
event_category: detections
event_data:
{"connection_id":1726053,"detection_time":1742027837,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":7629,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 110efbb5-35c4-4363-ac45-2a4601bdec16
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742028065,"event_type_id":6,"status":"blocked"}


event_id: 76477e7d-3383-431f-bd81-799997dd0c47
log_level: critical
event_category: detections
event_data:
{"connection_id":1726799,"detection_time":1742028065,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46906,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0efe7dfc-a045-44f2-8906-4ff99d1ca31b
log_level: critical
event_category: detections
event_data:
{"connection_id":1729565,"detection_time":1742028484,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":11605,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02781bb9-ac74-402c-93b2-dc35eed8f8d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1729609,"detection_time":1742028491,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":2937,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3182a62b-5a0d-4345-be42-ada2c420c957
log_level: critical
event_category: detections
event_data:
{"connection_id":1729665,"detection_time":1742028497,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":52889,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2dcf6201-4098-4a17-bb04-88818dfa3eb8
log_level: critical
event_category: detections
event_data:
{"connection_id":1730174,"detection_time":1742028567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":27739,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 594a8920-aa9e-43af-91e9-bfbbfbd00a3e
log_level: critical
event_category: detections
event_data:
{"connection_id":1730233,"detection_time":1742028574,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":18708,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9699f855-002e-41d6-a440-6ede3f84b39a
log_level: critical
event_category: detections
event_data:
{"connection_id":1730271,"detection_time":1742028580,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":8955,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7f2748f8-ff77-4ff3-bacb-c7e68f90e8c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1731047,"detection_time":1742028689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":53589,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c6020b43-565b-4701-a006-969ce5a4211a
log_level: critical
event_category: detections
event_data:
{"connection_id":1731115,"detection_time":1742028696,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":44438,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a9fb78dd-39f8-4336-b07d-17192f1bb873
log_level: critical
event_category: detections
event_data:
{"connection_id":1731163,"detection_time":1742028702,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":35190,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 17c4b2e2-26d7-4b62-b543-b704b1e5ed50
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742029037,"event_type_id":6,"status":"blocked"}


event_id: a1bbeb45-b6ee-4138-806f-84e019c45136
log_level: critical
event_category: detections
event_data:
{"connection_id":1733631,"detection_time":1742029038,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43887,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98114846-8584-47d7-840e-10d5ddb8a7d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1735837,"detection_time":1742029331,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":17562,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5e1397b-3f48-4207-9478-0c06d78d6b21
log_level: critical
event_category: detections
event_data:
{"connection_id":1735888,"detection_time":1742029337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":7483,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0e8963da-c8c3-4925-ae99-a1894bf3efa3
log_level: critical
event_category: detections
event_data:
{"connection_id":1735936,"detection_time":1742029344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":55495,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e1e8de89-1d0d-484e-8e3e-812070a80d93
log_level: critical
event_category: detections
event_data:
{"connection_id":1736173,"detection_time":1742029373,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":52209,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 364bfc7a-280f-416b-86b3-58c2af7e0580
log_level: critical
event_category: detections
event_data:
{"connection_id":1736226,"detection_time":1742029379,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":40499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ffc0355e-6b6e-4f76-88ba-b8c2512307f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1736273,"detection_time":1742029385,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":28241,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5678ee73-b78a-4626-939c-e0236274c04d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742029524,"event_type_id":6,"status":"blocked"}


event_id: 10a00566-631a-4c6f-9e41-a7857a16ef4d
log_level: critical
event_category: detections
event_data:
{"connection_id":1737387,"detection_time":1742029524,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42661,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 177ab1d7-bea7-4037-baa0-24c40090b0d0
log_level: critical
event_category: detections
event_data:
{"connection_id":1738032,"detection_time":1742029611,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":11312,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c2d90f4-f79c-4f9c-ab99-41a5a0f050c2
log_level: critical
event_category: detections
event_data:
{"connection_id":1738075,"detection_time":1742029617,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":2223,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b6774b7a-6a74-4f19-be32-df4ade4603a2
log_level: critical
event_category: detections
event_data:
{"connection_id":1738136,"detection_time":1742029624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":51741,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee945272-ca16-4d62-bf0e-137453fed9ab
log_level: critical
event_category: detections
event_data:
{"connection_id":1741747,"detection_time":1742030114,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":58214,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f4bb9e93-4e36-46ec-809b-aeb1b96a748b
log_level: critical
event_category: detections
event_data:
{"connection_id":1741796,"detection_time":1742030121,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":41219,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ed4a2b65-7446-42f1-97e8-454264fb8b12
log_level: critical
event_category: detections
event_data:
{"connection_id":1741845,"detection_time":1742030127,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":25585,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 67b67b77-1d8d-4c5b-9026-d1012a953c86
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742030496,"event_type_id":6,"status":"blocked"}


event_id: a2a4c2c8-4750-4dc6-9d4f-fbc2c900011c
log_level: critical
event_category: detections
event_data:
{"connection_id":1744621,"detection_time":1742030496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40563,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b773f1cf-602e-4ee9-93b6-4bd8745b54db
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742030678,"event_type_id":6,"status":"blocked"}


event_id: 6cf92771-9ccf-46e2-9dfe-8b38d5489849
log_level: critical
event_category: detections
event_data:
{"connection_id":1745946,"detection_time":1742030678,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42611,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f44a8a41-0c4f-495c-82e6-3ee0f040e802
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742030986,"event_type_id":6,"status":"blocked"}


event_id: d8727872-40f9-47d7-90f6-f3dcc7cbe31f
log_level: critical
event_category: detections
event_data:
{"connection_id":1748692,"detection_time":1742030986,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39204,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a85b373-2e7f-4914-8955-d5c0d4830a7e
log_level: critical
event_category: detections
event_data:
{"connection_id":1749305,"detection_time":1742031062,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":39104,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 88c1c976-f425-444b-9280-5aec9e21be3d
log_level: critical
event_category: detections
event_data:
{"connection_id":1749359,"detection_time":1742031068,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":30720,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8db4b9e2-4f66-4418-a307-2bf3e9f7947a
log_level: critical
event_category: detections
event_data:
{"connection_id":1749416,"detection_time":1742031075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":22851,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0ff8b9b2-6511-49a5-83dc-1ce0b448f915
log_level: critical
event_category: detections
event_data:
{"connection_id":1749502,"detection_time":1742031086,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":59975,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2d573885-9a5d-404f-9c00-f6528e5a6c1c
log_level: critical
event_category: detections
event_data:
{"connection_id":1749575,"detection_time":1742031093,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":51865,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98f01882-695a-481d-8eb6-2cda6ed2584f
log_level: critical
event_category: detections
event_data:
{"connection_id":1749611,"detection_time":1742031099,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":43461,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1da1b619-d9ef-4753-a2e7-e37e558034d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742031181,"event_type_id":6,"status":"blocked"}


event_id: b2d9eb6d-7dab-4278-b185-80ddd9adf47a
log_level: critical
event_category: detections
event_data:
{"connection_id":1750272,"detection_time":1742031181,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51876,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88c3bbce-3317-49ce-a6f8-69fc9c81b5ed
log_level: critical
event_category: detections
event_data:
{"connection_id":1750435,"detection_time":1742031203,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"185.170.144.3","remote_port":63553,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86e3b3ba-c5ea-4491-8f97-44903be90258
log_level: critical
event_category: detections
event_data:
{"connection_id":1750779,"detection_time":1742031245,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":14816,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6bfb73ce-715d-43a4-a045-89850cfd5610
log_level: critical
event_category: detections
event_data:
{"connection_id":1750845,"detection_time":1742031252,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":7052,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 326a41e7-c4f3-43d3-90b1-79a0c0b3db51
log_level: critical
event_category: detections
event_data:
{"connection_id":1750900,"detection_time":1742031258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":57322,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bf00376c-7a9c-4963-997f-84e8f27418f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1753201,"detection_time":1742031563,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":24330,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 76912906-cb4c-4e6a-a27f-8d5b5fd4588a
log_level: critical
event_category: detections
event_data:
{"connection_id":1753243,"detection_time":1742031569,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":57190,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 27d31708-6025-45e5-94ad-05f9f801e2bd
log_level: critical
event_category: detections
event_data:
{"connection_id":1753890,"detection_time":1742031660,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":2232,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0c62d890-167c-48e3-a960-ee56b10aeb47
log_level: critical
event_category: detections
event_data:
{"connection_id":1753953,"detection_time":1742031667,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":51897,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7ec23bea-0c28-462f-8b60-d5c2e43fb512
log_level: critical
event_category: detections
event_data:
{"connection_id":1753996,"detection_time":1742031673,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":43827,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7f71a026-bc5f-4a6f-adc1-3fdd0f6d75b0
log_level: critical
event_category: detections
event_data:
{"connection_id":1755493,"detection_time":1742031870,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":8855,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e3a31c15-56d6-4f33-ae58-3db7770139ca
log_level: critical
event_category: detections
event_data:
{"connection_id":1755552,"detection_time":1742031876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":2799,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 995a1d36-8415-4ec4-abdd-041d5db0c996
log_level: critical
event_category: detections
event_data:
{"connection_id":1755597,"detection_time":1742031883,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":54634,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6ed01916-5f20-4034-9471-b9d59bd721f6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742031956,"event_type_id":6,"status":"blocked"}


event_id: 6b1f73a8-4c76-4960-b152-05d4ab16ad12
log_level: critical
event_category: detections
event_data:
{"connection_id":1756140,"detection_time":1742031956,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35841,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: afd7132c-d21e-4156-9553-50c0f20b2ad9
log_level: critical
event_category: detections
event_data:
{"connection_id":1756431,"detection_time":1742031995,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":35301,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 10b69b7d-a71e-4a1a-a7b4-8b6c1ad2dfb8
log_level: critical
event_category: detections
event_data:
{"connection_id":1756484,"detection_time":1742032002,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":26374,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 841ee591-e868-4581-9bbd-9f1888a7d7c0
log_level: critical
event_category: detections
event_data:
{"connection_id":1756529,"detection_time":1742032008,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":16232,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 04d4e3d9-8155-49c5-b50d-7c001a0fa19f
log_level: critical
event_category: detections
event_data:
{"connection_id":1757316,"detection_time":1742032113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":59348,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 36bb9375-b706-4c83-ba22-c44e43754015
log_level: critical
event_category: detections
event_data:
{"connection_id":1757363,"detection_time":1742032119,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":50903,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 01680ea5-90e4-41ff-a978-c1e651bbf12e
log_level: critical
event_category: detections
event_data:
{"connection_id":1757408,"detection_time":1742032126,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":41485,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 88f0a86f-3aec-4163-99e5-bc5a76ec8b91
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742032188,"event_type_id":6,"status":"blocked"}


event_id: b53ac276-ba63-457c-8ba1-647889e92906
log_level: critical
event_category: detections
event_data:
{"connection_id":1757941,"detection_time":1742032188,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42575,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aafd6738-b5ab-4987-81b6-88efc829dbc2
log_level: critical
event_category: detections
event_data:
{"connection_id":1758487,"detection_time":1742032260,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":6027,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 70598206-8f1a-4f5e-887b-fe793018d83b
log_level: critical
event_category: detections
event_data:
{"connection_id":1758559,"detection_time":1742032267,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":55865,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 950d38e2-cf81-4a22-8815-63f4b6fbf74d
log_level: critical
event_category: detections
event_data:
{"connection_id":1758601,"detection_time":1742032273,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":46702,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 96795088-ca24-4546-a55b-8fd9adc5247b
log_level: critical
event_category: detections
event_data:
{"connection_id":1759633,"detection_time":1742032416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":25713,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 036269e9-558c-40a6-baeb-14091de1b357
log_level: critical
event_category: detections
event_data:
{"connection_id":1759640,"detection_time":1742032417,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":46331,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7aba062-db5b-4645-9004-efa488784495
log_level: critical
event_category: detections
event_data:
{"connection_id":1759689,"detection_time":1742032423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":16640,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3a026487-ad6f-49ff-a30d-c7087d0038b9
log_level: critical
event_category: detections
event_data:
{"connection_id":1759699,"detection_time":1742032424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":38350,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c60593d7-3b5e-43f9-b408-8440195a013e
log_level: critical
event_category: detections
event_data:
{"connection_id":1759749,"detection_time":1742032429,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":7483,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6d645ab4-33ec-4cc1-bffb-9e57c2079438
log_level: critical
event_category: detections
event_data:
{"connection_id":1759754,"detection_time":1742032430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":30264,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4c887c55-5f5d-4ae5-ae2e-087fa546b11a
log_level: critical
event_category: detections
event_data:
{"connection_id":1761011,"detection_time":1742032600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":51021,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6ac64ce0-5978-4d89-b164-8bf57aa3f4ae
log_level: critical
event_category: detections
event_data:
{"connection_id":1761060,"detection_time":1742032606,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":42887,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cf5d0b36-cad2-467b-ac24-be6eef663329
log_level: critical
event_category: detections
event_data:
{"connection_id":1761099,"detection_time":1742032613,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":36132,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2dc32af1-eee3-4c2b-8d67-4327a21e8257
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742032691,"event_type_id":6,"status":"blocked"}


event_id: bc21e694-4bef-4708-b319-36c78905671d
log_level: critical
event_category: detections
event_data:
{"connection_id":1761689,"detection_time":1742032691,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3b5a0a0c-2923-4522-abbe-28d51aee83e6
log_level: critical
event_category: detections
event_data:
{"connection_id":1764256,"detection_time":1742033005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":19334,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f6f73d1c-8547-4ca4-a485-2b13cf542b6e
log_level: critical
event_category: detections
event_data:
{"connection_id":1764313,"detection_time":1742033012,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":11805,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3a0b00ae-b7ec-4d55-a96c-b5227a62648e
log_level: critical
event_category: detections
event_data:
{"connection_id":1764368,"detection_time":1742033018,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":3081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85ca95c7-df5b-4efd-90c1-b246cdd83342
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742033198,"event_type_id":6,"status":"blocked"}


event_id: 39ccc906-9dad-45bb-8036-6624ffc1e194
log_level: critical
event_category: detections
event_data:
{"connection_id":1765760,"detection_time":1742033198,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":32854,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 733a2357-fa78-4161-ba31-463f4eea822e
log_level: critical
event_category: detections
event_data:
{"connection_id":1766262,"detection_time":1742033267,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":9254,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e79bb9c2-9a70-4fd2-bc24-43f005314f0c
log_level: critical
event_category: detections
event_data:
{"connection_id":1766331,"detection_time":1742033274,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":1451,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6963746f-5c1d-46cf-a6a4-cbbcb2f4b04a
log_level: critical
event_category: detections
event_data:
{"connection_id":1766374,"detection_time":1742033280,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":52763,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9b6e55b1-b6fe-4004-991d-fb0f2e12befe
log_level: critical
event_category: detections
event_data:
{"connection_id":1770418,"detection_time":1742033830,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"205.210.31.227","remote_port":64514,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bb535906-128d-4210-aec0-eb6db6080bcf
log_level: critical
event_category: detections
event_data:
{"connection_id":1770469,"detection_time":1742033837,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"205.210.31.227","remote_port":61026,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 228eb8cd-944a-4cc2-bc2c-09ec6290ec0c
log_level: critical
event_category: detections
event_data:
{"connection_id":1770761,"detection_time":1742033875,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":27302,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b0c5517-1e22-4a1b-98c0-dd253c3efa17
log_level: critical
event_category: detections
event_data:
{"connection_id":1770803,"detection_time":1742033882,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":25987,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0382b84c-e1d1-4e7b-be99-69ff8ce31139
log_level: critical
event_category: detections
event_data:
{"connection_id":1770850,"detection_time":1742033888,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":22942,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ce28c672-2d30-4262-91e3-25dbd065da28
log_level: critical
event_category: detections
event_data:
{"connection_id":1771429,"detection_time":1742033967,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":3892,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 244a3c5d-be64-4624-bd9b-38cdaeb67bb0
log_level: critical
event_category: detections
event_data:
{"connection_id":1771472,"detection_time":1742033973,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":55153,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ebe4849-665d-4cf9-97e9-b019ab783e4d
log_level: critical
event_category: detections
event_data:
{"connection_id":1771532,"detection_time":1742033980,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":47017,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f86650c7-4f44-4e6c-b68e-c180a9564bf3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742034208,"event_type_id":6,"status":"blocked"}


event_id: 051c51e6-0878-4f9c-8ddd-9e03257d9067
log_level: critical
event_category: detections
event_data:
{"connection_id":1773205,"detection_time":1742034208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51750,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 490c964f-1962-452a-af85-7201d553bd81
log_level: critical
event_category: detections
event_data:
{"connection_id":1773401,"detection_time":1742034235,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":12297,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5991adfc-108e-4c18-a038-0231a943f3bd
log_level: critical
event_category: detections
event_data:
{"connection_id":1773447,"detection_time":1742034242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":3442,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 461720e5-a00e-478a-9953-03f5a60ddc79
log_level: critical
event_category: detections
event_data:
{"connection_id":1773503,"detection_time":1742034248,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":53570,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e7676930-4043-4cc4-aee5-431ed57d1d2d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742034391,"event_type_id":6,"status":"blocked"}


event_id: 8580f3cd-7836-4e09-a3d6-85e3d538641d
log_level: critical
event_category: detections
event_data:
{"connection_id":1774500,"detection_time":1742034391,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57688,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 934b113e-3124-4dd6-8314-5091f142eb41
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742034704,"event_type_id":6,"status":"blocked"}


event_id: b5907f0d-3a7a-43d1-928d-b8b9b88c0629
log_level: critical
event_category: detections
event_data:
{"connection_id":1776823,"detection_time":1742034704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60800,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b5d098ba-31c7-4517-8368-862efc0d79da
log_level: critical
event_category: detections
event_data:
{"connection_id":1778516,"detection_time":1742034920,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":43018,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7b48cd33-2d06-4ae9-a93d-f284d589daa1
log_level: critical
event_category: detections
event_data:
{"connection_id":1778558,"detection_time":1742034927,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":33206,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e442ab3c-65ca-49d5-afba-eb1d0c17118e
log_level: critical
event_category: detections
event_data:
{"connection_id":1778606,"detection_time":1742034933,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":23814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 09b3c15a-e899-4e1e-a345-e662878579f8
log_level: critical
event_category: detections
event_data:
{"connection_id":1779698,"detection_time":1742035078,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":28990,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d2523f42-e263-42e1-9edc-60fc160ddbf0
log_level: critical
event_category: detections
event_data:
{"connection_id":1779754,"detection_time":1742035086,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":4496,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f3378cf4-3aa9-4175-9b97-17293cb505c6
log_level: critical
event_category: detections
event_data:
{"connection_id":1779803,"detection_time":1742035092,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":42196,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b6a6af82-4695-4c53-8a6c-5c8669cec5ec
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742035208,"event_type_id":6,"status":"blocked"}


event_id: f35a9d8f-bc57-4991-8f7c-0dcfd95d20ce
log_level: critical
event_category: detections
event_data:
{"connection_id":1780621,"detection_time":1742035208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41812,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1452e22e-b66d-482d-aad6-37876ff5a95e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742035361,"event_type_id":6,"status":"blocked"}


event_id: e0e05517-c655-4541-af52-41e4e200d530
log_level: critical
event_category: detections
event_data:
{"connection_id":1781747,"detection_time":1742035361,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55373,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed2a14a2-278f-4e6a-be9b-18d39fc445b0
log_level: critical
event_category: detections
event_data:
{"connection_id":1782065,"detection_time":1742035403,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":36772,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14b746ed-24f6-4229-b56e-e50f66fa85c0
log_level: critical
event_category: detections
event_data:
{"connection_id":1782108,"detection_time":1742035410,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":28875,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f00df338-f066-447b-a427-293e61f743d2
log_level: critical
event_category: detections
event_data:
{"connection_id":1782156,"detection_time":1742035416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":21210,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b4a5c56f-744a-4524-94c2-f4a8c886be63
log_level: critical
event_category: detections
event_data:
{"connection_id":1785019,"detection_time":1742035807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":39489,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 94f5d07f-8941-42bb-ae74-c37f340814cb
log_level: critical
event_category: detections
event_data:
{"connection_id":1785064,"detection_time":1742035814,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":29820,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 25a8918f-48e8-4bba-9e8b-51bec5bcbd38
log_level: critical
event_category: detections
event_data:
{"connection_id":1785128,"detection_time":1742035820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":17521,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 33703780-8670-435e-b846-26741c56b21c
log_level: critical
event_category: detections
event_data:
{"connection_id":1786248,"detection_time":1742035973,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":46420,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7ec68132-2492-46b5-b14b-c68098f1b68f
log_level: critical
event_category: detections
event_data:
{"connection_id":1786302,"detection_time":1742035979,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":35806,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5fec6e12-6780-48e3-bf8c-d368cc853bc4
log_level: critical
event_category: detections
event_data:
{"connection_id":1786358,"detection_time":1742035986,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":25083,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 00b78e6b-a2dc-4cdb-b06f-fcbe9cd74eb6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742036213,"event_type_id":6,"status":"blocked"}


event_id: 24703fbb-79cf-46e6-8791-65f9b8511646
log_level: critical
event_category: detections
event_data:
{"connection_id":1788006,"detection_time":1742036213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60114,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c30d3518-1d3d-42e5-b53a-0179d4bda809
log_level: critical
event_category: detections
event_data:
{"connection_id":1788076,"detection_time":1742036224,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":20917,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98afaf7e-e90f-4afa-a526-c498ab2daf03
log_level: critical
event_category: detections
event_data:
{"connection_id":1788125,"detection_time":1742036230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":13656,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 621c3aa6-a568-4f69-8feb-db5cce40d8f8
log_level: critical
event_category: detections
event_data:
{"connection_id":1788175,"detection_time":1742036237,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":4845,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f952598b-204a-4211-8702-6c498a7a14bc
log_level: critical
event_category: detections
event_data:
{"connection_id":1788377,"detection_time":1742036262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":23335,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3c9409fb-3360-4e91-8ebd-db16aa5eee2e
log_level: critical
event_category: detections
event_data:
{"connection_id":1788422,"detection_time":1742036269,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":15490,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61cddf73-a001-46b7-ad2f-18aee11eaea7
log_level: critical
event_category: detections
event_data:
{"connection_id":1788462,"detection_time":1742036275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":7045,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3fd43852-5817-41b9-b933-b9c9c932721d
log_level: critical
event_category: detections
event_data:
{"connection_id":1788870,"detection_time":1742036328,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":19711,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 667159a2-cc15-48ae-8873-c40b7eb3a44d
log_level: critical
event_category: detections
event_data:
{"connection_id":1788920,"detection_time":1742036334,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":7144,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1d012f06-4c8b-4125-bcb8-cae58f183886
log_level: critical
event_category: detections
event_data:
{"connection_id":1788960,"detection_time":1742036341,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":53545,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0514a31f-ff59-4d89-aa36-6ff2a5781b52
log_level: critical
event_category: detections
event_data:
{"connection_id":1789820,"detection_time":1742036455,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":20074,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c9db598f-1e77-4b1b-9e34-12bd00641872
log_level: critical
event_category: detections
event_data:
{"connection_id":1789861,"detection_time":1742036461,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":10920,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 20297764-33b6-4011-8a6b-dbb354e6cb79
log_level: critical
event_category: detections
event_data:
{"connection_id":1789913,"detection_time":1742036468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":2174,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a1db95cb-fc27-4dea-81d2-216cbdef264b
log_level: critical
event_category: detections
event_data:
{"connection_id":1791539,"detection_time":1742036671,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":58156,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ba0c488e-5552-4511-8c48-c8e0901d92ad
log_level: critical
event_category: detections
event_data:
{"connection_id":1791598,"detection_time":1742036678,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":46127,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac7ae536-3c97-4ee0-a4da-997f4d56e50d
log_level: critical
event_category: detections
event_data:
{"connection_id":1791659,"detection_time":1742036684,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":33819,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ab0d0afd-9e01-4d01-bdf5-7bc0c4e84541
log_level: critical
event_category: detections
event_data:
{"connection_id":1794226,"detection_time":1742037028,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":3753,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 48950b38-03f8-4fd1-b8bd-f2d64ce1419b
log_level: critical
event_category: detections
event_data:
{"connection_id":1794288,"detection_time":1742037034,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":54701,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 59d2de90-e5a5-4650-b3e6-feb5181c61c1
log_level: critical
event_category: detections
event_data:
{"connection_id":1794335,"detection_time":1742037041,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":46271,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5b038a92-1744-4115-8c37-a2ac70686432
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742037218,"event_type_id":6,"status":"blocked"}


event_id: 83484f3f-647a-4232-8c04-bfedef1985c0
log_level: critical
event_category: detections
event_data:
{"connection_id":1795639,"detection_time":1742037218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50042,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d4060d06-a353-49c7-9811-9f66838c1cfb
log_level: critical
event_category: detections
event_data:
{"connection_id":1797643,"detection_time":1742037488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":54366,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb8e948e-0c89-45c5-ac40-aa8ff5eacd07
log_level: critical
event_category: detections
event_data:
{"connection_id":1797689,"detection_time":1742037494,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":42454,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aa7cc8e7-8f93-4f9e-85e2-8619e49aab51
log_level: critical
event_category: detections
event_data:
{"connection_id":1797736,"detection_time":1742037501,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":29681,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4b8a00d7-710d-48b8-aef7-3e3162f4d6ea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742037721,"event_type_id":6,"status":"blocked"}


event_id: 1e95fe03-218e-4dee-968b-8017959daada
log_level: critical
event_category: detections
event_data:
{"connection_id":1799362,"detection_time":1742037721,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58838,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c2eca861-1141-4d75-bfb3-490cb9393b3a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742037794,"event_type_id":6,"status":"blocked"}


event_id: 6e94b8c8-30eb-4c90-872d-e7c6f47477b9
log_level: critical
event_category: detections
event_data:
{"connection_id":1799961,"detection_time":1742037794,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49346,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a8cf61de-10c3-4c02-98b4-3b4791bbb888
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"157.66.219.182","autoblock_timeout":25,"detection_time":1742037953,"event_type_id":6,"status":"blocked"}


event_id: f1484200-6f9b-49da-b598-2ca321db7b92
log_level: critical
event_category: detections
event_data:
{"connection_id":1801177,"detection_time":1742037953,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"157.66.219.182","remote_port":55374,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 158869de-7473-4d11-8493-bdb3ec5a4359
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"157.66.219.182","autoblock_timeout":25,"detection_time":1742037963,"event_type_id":6,"status":"blocked"}


event_id: 2af5c6eb-ce5e-481d-a7ca-f66753654978
log_level: critical
event_category: detections
event_data:
{"connection_id":1801252,"detection_time":1742037963,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"157.66.219.182","remote_port":57673,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0e62c5fd-63a6-4863-a1bd-795b1ef2eb29
log_level: critical
event_category: detections
event_data:
{"connection_id":1801543,"detection_time":1742038001,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":24020,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 136ba9ed-352c-4580-8856-a3180402b975
log_level: critical
event_category: detections
event_data:
{"connection_id":1801596,"detection_time":1742038008,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":15652,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 46566479-9484-4df4-bf63-5d90d9b7267b
log_level: critical
event_category: detections
event_data:
{"connection_id":1801644,"detection_time":1742038014,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":7814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 289c51b8-707d-4ecc-b682-6b9763e8f92e
log_level: critical
event_category: detections
event_data:
{"connection_id":1802937,"detection_time":1742038185,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":51766,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4a0346be-904c-48a6-87d2-c1ac09812472
log_level: critical
event_category: detections
event_data:
{"connection_id":1802977,"detection_time":1742038191,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":39395,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f60d8deb-aaa5-45e8-a221-b1de840721f8
log_level: critical
event_category: detections
event_data:
{"connection_id":1803032,"detection_time":1742038197,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":26514,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a4a5a810-fc41-42eb-a87e-26c27ae39a62
log_level: critical
event_category: detections
event_data:
{"connection_id":1805093,"detection_time":1742038466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":12987,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6f90e807-ccec-4427-b6c9-2bc2f667a8a6
log_level: critical
event_category: detections
event_data:
{"connection_id":1805139,"detection_time":1742038473,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":59693,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4e751d72-6c31-4fbd-9f53-ba002060ce95
log_level: critical
event_category: detections
event_data:
{"connection_id":1805180,"detection_time":1742038479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":48545,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3bbb25a3-3332-4111-b570-ca5584cfb722
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742038729,"event_type_id":6,"status":"blocked"}


event_id: 3c75447d-f3b4-4995-bfe4-c0b45142bc63
log_level: critical
event_category: detections
event_data:
{"connection_id":1807022,"detection_time":1742038729,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48259,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 34411568-871b-4de5-a6d2-eeda9080570b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742038773,"event_type_id":6,"status":"blocked"}


event_id: 9d6adc6e-070a-4597-8025-be9fc95566f9
log_level: critical
event_category: detections
event_data:
{"connection_id":1807331,"detection_time":1742038773,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48055,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1dbc411e-303f-4b16-9c66-bed1622e578a
log_level: critical
event_category: detections
event_data:
{"connection_id":1807862,"detection_time":1742038844,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":51846,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4a929826-7946-43c5-a12a-2b7815c12e9f
log_level: critical
event_category: detections
event_data:
{"connection_id":1807919,"detection_time":1742038850,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":50846,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 96233572-5bcd-4a0a-a0fc-914f188fe004
log_level: critical
event_category: detections
event_data:
{"connection_id":1807960,"detection_time":1742038857,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":47333,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d954720c-f7ae-41b3-94cf-91f98fe59c10
log_level: critical
event_category: detections
event_data:
{"connection_id":1808967,"detection_time":1742038995,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":30867,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aa1ebb07-3b7c-4751-b4e8-6be3c07082cd
log_level: critical
event_category: detections
event_data:
{"connection_id":1809022,"detection_time":1742039001,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":20409,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2151f4bc-3f83-4265-bcff-6701310f6423
log_level: critical
event_category: detections
event_data:
{"connection_id":1809073,"detection_time":1742039008,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":7713,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d2b20500-986f-471e-bb70-d7156b6e15d0
log_level: critical
event_category: detections
event_data:
{"connection_id":1810014,"detection_time":1742039133,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":50930,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 47cbbb65-ac3f-40cb-8026-923c6a20074b
log_level: critical
event_category: detections
event_data:
{"connection_id":1810057,"detection_time":1742039139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":40146,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 94cc26dd-4324-4de4-8929-f44a413ce092
log_level: critical
event_category: detections
event_data:
{"connection_id":1810106,"detection_time":1742039146,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":26167,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 95896262-21dc-49aa-9c7e-33a14b1e3ca3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742039236,"event_type_id":6,"status":"blocked"}


event_id: 35ce815f-c194-4f13-913c-3ed8987d36f3
log_level: critical
event_category: detections
event_data:
{"connection_id":1810790,"detection_time":1742039236,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57304,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f1a901dd-f22d-48aa-8629-8c6c05b37429
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742039258,"event_type_id":6,"status":"blocked"}


event_id: 7fb8126f-938d-4747-8c4a-dec6218b0d3d
log_level: critical
event_category: detections
event_data:
{"connection_id":1810935,"detection_time":1742039258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46768,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9c85ea0a-873a-4fea-94e3-d82140a34748
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742039734,"event_type_id":6,"status":"blocked"}


event_id: c8ef6350-44a4-4657-aa70-9f0ec8e5a932
log_level: critical
event_category: detections
event_data:
{"connection_id":1814377,"detection_time":1742039734,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39451,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b44f8071-36af-4430-9b53-ae05009ade89
log_level: critical
event_category: detections
event_data:
{"connection_id":1817949,"detection_time":1742040215,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":40475,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8164bd06-239a-4d88-be0e-43b3dad3210b
log_level: critical
event_category: detections
event_data:
{"connection_id":1818004,"detection_time":1742040221,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":29821,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b5a8da53-4abe-492b-a535-1d5f49a90a19
log_level: critical
event_category: detections
event_data:
{"connection_id":1818059,"detection_time":1742040227,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":20039,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2c0bab2a-ca48-4778-a047-589d3dcedda9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742040237,"event_type_id":6,"status":"blocked"}


event_id: a8d24219-d826-4759-a49f-8186ae917782
log_level: critical
event_category: detections
event_data:
{"connection_id":1818118,"detection_time":1742040237,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43043,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f050f8f-6e9c-4ce6-b538-eb8d717299f6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742040239,"event_type_id":6,"status":"blocked"}


event_id: b29cbd40-b86c-477e-acd4-76e08c76f637
log_level: critical
event_category: detections
event_data:
{"connection_id":1818133,"detection_time":1742040239,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48839,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b06ae78c-47c4-47a3-a6e9-a11cfd051d66
log_level: critical
event_category: detections
event_data:
{"connection_id":1819248,"detection_time":1742040385,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":5677,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9097b086-44b0-4739-bc4c-a76b9a1f64d9
log_level: critical
event_category: detections
event_data:
{"connection_id":1819295,"detection_time":1742040391,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":54884,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f2bee53b-60ea-4e88-aad7-c53a6a61a71a
log_level: critical
event_category: detections
event_data:
{"connection_id":1819354,"detection_time":1742040398,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":44191,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f41a95f-cf40-45b1-b6a8-c4ae1df60302
log_level: critical
event_category: detections
event_data:
{"connection_id":1819668,"detection_time":1742040442,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.37.69.105","remote_port":64834,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 43669117-7e04-43d9-9344-a714ef1d8a43
log_level: critical
event_category: detections
event_data:
{"connection_id":1820006,"detection_time":1742040488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":44334,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3dc18eca-326a-4b5f-b6ee-64bcc800c6a1
log_level: critical
event_category: detections
event_data:
{"connection_id":1820049,"detection_time":1742040495,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":29939,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2fcaf7f0-8862-4bd8-a1fa-a69657fcd847
log_level: critical
event_category: detections
event_data:
{"connection_id":1820092,"detection_time":1742040501,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":16334,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c7949f01-8234-45f7-8ba7-981e27f7af77
log_level: critical
event_category: detections
event_data:
{"connection_id":1820986,"detection_time":1742040627,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":16949,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 92cd11a2-e215-465f-a4f5-ce134d33bd8c
log_level: critical
event_category: detections
event_data:
{"connection_id":1821056,"detection_time":1742040634,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":4010,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 63124ee1-8a42-44c1-89e1-758788a6d263
log_level: critical
event_category: detections
event_data:
{"connection_id":1821097,"detection_time":1742040640,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":46705,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b2d04c3-6467-471b-b018-f5df6f69423a
log_level: critical
event_category: detections
event_data:
{"connection_id":1823436,"detection_time":1742040968,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":13821,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 27922a98-08c3-4534-afa0-04333450f2a3
log_level: critical
event_category: detections
event_data:
{"connection_id":1823483,"detection_time":1742040974,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":35570,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c8c24e94-d5a9-4d82-bc91-cc593dfd01b6
log_level: critical
event_category: detections
event_data:
{"connection_id":1823522,"detection_time":1742040980,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":56669,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7ac8dd3d-1e98-4535-9243-26c6c3518baf
log_level: critical
event_category: detections
event_data:
{"connection_id":1823666,"detection_time":1742040999,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":4081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4a44c0ac-386e-4627-b260-32365c9c207c
log_level: critical
event_category: detections
event_data:
{"connection_id":1823711,"detection_time":1742041005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":52137,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e056d843-17fa-49a5-961d-648162a5f68b
log_level: critical
event_category: detections
event_data:
{"connection_id":1823757,"detection_time":1742041012,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":40692,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 45312d64-1218-47c6-bf03-8ddc5c1c8ea9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742041206,"event_type_id":6,"status":"blocked"}


event_id: 0c2d2940-0839-47fb-8fbf-704cb48f610c
log_level: critical
event_category: detections
event_data:
{"connection_id":1825185,"detection_time":1742041206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40584,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f030b083-e94f-4f8b-8455-6dc9fb171edb
log_level: critical
event_category: detections
event_data:
{"connection_id":1825814,"detection_time":1742041292,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":11180,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02caf17b-d149-43de-a4cc-3acd59c82af1
log_level: critical
event_category: detections
event_data:
{"connection_id":1825859,"detection_time":1742041298,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":42861,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 671d1a91-8a2e-484d-87e3-dcd276f0edfa
log_level: critical
event_category: detections
event_data:
{"connection_id":1825895,"detection_time":1742041305,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":15734,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3aebf64a-af6e-41bd-89c5-d3ed5e000683
log_level: critical
event_category: detections
event_data:
{"connection_id":1826311,"detection_time":1742041361,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":30848,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c3be8f0d-4267-4762-974e-5dc949325d87
log_level: critical
event_category: detections
event_data:
{"connection_id":1826347,"detection_time":1742041367,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":18223,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4634adec-fbb4-4389-bb32-7e7e408faf13
log_level: critical
event_category: detections
event_data:
{"connection_id":1826392,"detection_time":1742041374,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":3690,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8a32097e-8708-496f-b547-98ddb7027b30
log_level: critical
event_category: detections
event_data:
{"connection_id":1827350,"detection_time":1742041508,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":36187,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2eeb6269-77d9-4697-84ab-aa78f32c02e8
log_level: critical
event_category: detections
event_data:
{"connection_id":1827399,"detection_time":1742041514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":24812,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eb69613a-c31d-41f9-bca3-4173f53e43d9
log_level: critical
event_category: detections
event_data:
{"connection_id":1827440,"detection_time":1742041521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":12260,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4a134254-87cc-4152-a0bb-e6b52d38f682
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742041749,"event_type_id":6,"status":"blocked"}


event_id: b5969c01-1481-42cd-8cc7-b9cd88d029f5
log_level: critical
event_category: detections
event_data:
{"connection_id":1829262,"detection_time":1742041750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48884,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 579a623e-aa8d-4545-b30e-47a8476a2891
log_level: critical
event_category: detections
event_data:
{"connection_id":1830214,"detection_time":1742041829,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":46159,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b3d6cd61-fb46-468e-8092-c12cc93e331f
log_level: critical
event_category: detections
event_data:
{"connection_id":1830298,"detection_time":1742041835,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":42171,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a9ccf47f-4788-4982-94d5-bc479f2ef9fa
log_level: critical
event_category: detections
event_data:
{"connection_id":1830367,"detection_time":1742041842,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":39380,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f1252975-17c9-4aec-885e-0c177510f1af
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742042177,"event_type_id":6,"status":"blocked"}


event_id: 9eece984-9149-44f3-94c6-ef7cbba03e72
log_level: critical
event_category: detections
event_data:
{"connection_id":1833014,"detection_time":1742042177,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37312,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7517189f-0dd4-4dec-91de-e0e1276e7a2f
log_level: critical
event_category: detections
event_data:
{"connection_id":1833797,"detection_time":1742042289,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":5066,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a8bf694d-09b8-4db8-b045-4ffa02bc3854
log_level: critical
event_category: detections
event_data:
{"connection_id":1833847,"detection_time":1742042296,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":53675,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 44823238-804e-4166-a312-112e2920d2fb
log_level: critical
event_category: detections
event_data:
{"connection_id":1833895,"detection_time":1742042302,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":45335,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e230fe23-10f1-4c88-9ee4-c1bdc246a714
log_level: critical
event_category: detections
event_data:
{"connection_id":1834719,"detection_time":1742042411,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":34660,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8d4bbc8-ad28-47e9-8383-28baf9243a6b
log_level: critical
event_category: detections
event_data:
{"connection_id":1834759,"detection_time":1742042418,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":24278,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 42f6bbc9-b3a0-409f-9cbe-8d0d199c4af5
log_level: critical
event_category: detections
event_data:
{"connection_id":1834798,"detection_time":1742042424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":13680,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d54c3154-f9a1-452d-b2e2-685a131def4f
log_level: critical
event_category: detections
event_data:
{"connection_id":1835145,"detection_time":1742042470,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":8920,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a0184702-558a-4cac-8f85-3443b6314cc6
log_level: critical
event_category: detections
event_data:
{"connection_id":1835186,"detection_time":1742042477,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":53972,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 84233729-dd5c-4d39-ba7a-c85a02035b72
log_level: critical
event_category: detections
event_data:
{"connection_id":1835224,"detection_time":1742042483,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":39966,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d55d7a5d-a88a-4f5b-b0ca-a7aab2b7ace7
log_level: critical
event_category: detections
event_data:
{"connection_id":1835325,"detection_time":1742042496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":46350,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 477cc358-3308-48f7-95a1-d8115620024e
log_level: critical
event_category: detections
event_data:
{"connection_id":1835364,"detection_time":1742042502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":58164,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a91d0816-b42d-4ef7-9ab5-1b9d975be4ce
log_level: critical
event_category: detections
event_data:
{"connection_id":1835414,"detection_time":1742042509,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":14081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c2e62be-6b90-4146-a463-2f37560df592
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742042665,"event_type_id":6,"status":"blocked"}


event_id: 5b3f9ea9-d537-4586-b3db-22ade82dfbd1
log_level: critical
event_category: detections
event_data:
{"connection_id":1836573,"detection_time":1742042665,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 52c03502-b92c-4468-941e-866f45f10150
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742042764,"event_type_id":6,"status":"blocked"}


event_id: 7ec43a44-f9fb-4d73-bbba-542a69160a0e
log_level: critical
event_category: detections
event_data:
{"connection_id":1837328,"detection_time":1742042764,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40055,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 26078204-dc4f-4d83-a82b-e4c69229811e
log_level: critical
event_category: detections
event_data:
{"connection_id":1837915,"detection_time":1742042835,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":45539,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 17fb8c41-baa9-44fc-a15c-3995fad09d3e
log_level: critical
event_category: detections
event_data:
{"connection_id":1837965,"detection_time":1742042841,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":58991,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 52e76aa3-3e0b-4538-9a6a-c31c81cae97c
log_level: critical
event_category: detections
event_data:
{"connection_id":1838011,"detection_time":1742042848,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":14109,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: efb95265-89eb-4cb9-baba-fcef0ffdb0e1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742043261,"event_type_id":6,"status":"blocked"}


event_id: fc6e55a0-b5a9-4b27-a7c1-fa25d3f7906e
log_level: critical
event_category: detections
event_data:
{"connection_id":1841522,"detection_time":1742043261,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49459,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca31a6f4-9fe3-45a8-bbcd-20a65826d24b
log_level: critical
event_category: detections
event_data:
{"connection_id":1842010,"detection_time":1742043322,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":25443,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be5e4110-bbf2-4aa0-9eef-3ff307fb8857
log_level: critical
event_category: detections
event_data:
{"connection_id":1842059,"detection_time":1742043329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":36344,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 585eacb8-8af5-4bcc-bb59-d35dcce6ee97
log_level: critical
event_category: detections
event_data:
{"connection_id":1842133,"detection_time":1742043335,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":46500,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6a184e69-4aa8-4644-9382-12b5fe361bbc
log_level: critical
event_category: detections
event_data:
{"connection_id":1842934,"detection_time":1742043440,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":24706,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fe3dd5bf-7093-49ca-b8c3-068e82e6304d
log_level: critical
event_category: detections
event_data:
{"connection_id":1842982,"detection_time":1742043446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":36269,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 50e4a2dc-1adb-408f-aa60-e095f70bd243
log_level: critical
event_category: detections
event_data:
{"connection_id":1843057,"detection_time":1742043453,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":50917,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bb2334bc-500d-48a8-a6b9-7c0f1eef5092
log_level: critical
event_category: detections
event_data:
{"connection_id":1843509,"detection_time":1742043504,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":51492,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 73c39e57-d5f1-4c10-8aa7-4612903aec8f
log_level: critical
event_category: detections
event_data:
{"connection_id":1843575,"detection_time":1742043511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":38853,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ce04ab1-c035-4b6b-90c7-93984bd29e44
log_level: critical
event_category: detections
event_data:
{"connection_id":1843633,"detection_time":1742043517,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":25768,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 09b084a0-0aee-4958-8224-3f41451815d9
log_level: critical
event_category: detections
event_data:
{"connection_id":1843679,"detection_time":1742043522,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":42521,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c746af4-e2c9-49b1-a746-dfbf951aed30
log_level: critical
event_category: detections
event_data:
{"connection_id":1843735,"detection_time":1742043529,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":30330,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 212b8526-74a3-4dcb-86f5-86de874b8785
log_level: critical
event_category: detections
event_data:
{"connection_id":1843803,"detection_time":1742043535,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":17209,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2caf1c8c-0542-4f5a-88d8-9284bc1936a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742043764,"event_type_id":6,"status":"blocked"}


event_id: cd30cecf-7202-4bfd-a40b-e313e51a2db2
log_level: critical
event_category: detections
event_data:
{"connection_id":1845790,"detection_time":1742043764,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58775,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d39f1f3c-2fe6-4239-95bd-bd9700049517
log_level: critical
event_category: detections
event_data:
{"connection_id":1846725,"detection_time":1742043872,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":45793,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cab44eeb-0753-4843-a0c4-ad219ca93f77
log_level: critical
event_category: detections
event_data:
{"connection_id":1846781,"detection_time":1742043878,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":31195,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 08755608-65be-4bb1-bbab-a0351128ded9
log_level: critical
event_category: detections
event_data:
{"connection_id":1846849,"detection_time":1742043885,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":13134,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b2e361d6-9c24-40e6-9bc0-ea496b7ba7ea
log_level: critical
event_category: detections
event_data:
{"connection_id":1848750,"detection_time":1742044104,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":16861,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c11cf5c9-50e2-43f8-983c-69f2025d11ed
log_level: critical
event_category: detections
event_data:
{"connection_id":1848805,"detection_time":1742044110,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":3682,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cb7c7be1-dfd4-4582-875f-085951eee69e
log_level: critical
event_category: detections
event_data:
{"connection_id":1848860,"detection_time":1742044117,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":53257,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6bc63d34-9952-438f-824c-a25025e7d6c8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742044128,"event_type_id":6,"status":"blocked"}


event_id: e939f7a8-ee5c-4795-b9bb-63285a6535a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1848968,"detection_time":1742044128,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":59367,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80306783-6360-48f1-85ea-32d5fbf151d9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742044611,"event_type_id":6,"status":"blocked"}


event_id: ac2ded07-acbc-495e-a74c-76e5a503428c
log_level: critical
event_category: detections
event_data:
{"connection_id":1852835,"detection_time":1742044611,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58501,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f83a287f-6940-43b3-bdeb-bb6d9c512cf4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742044771,"event_type_id":6,"status":"blocked"}


event_id: 38fca2e0-d8d7-4dc3-9609-1b00b23d8bb3
log_level: critical
event_category: detections
event_data:
{"connection_id":1854173,"detection_time":1742044771,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49152,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 18739cb4-80a6-4811-b242-1e9068482f77
log_level: critical
event_category: detections
event_data:
{"connection_id":1854466,"detection_time":1742044808,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":18209,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0f95a4b4-bd88-4666-b642-dd9ff8e562cf
log_level: critical
event_category: detections
event_data:
{"connection_id":1854516,"detection_time":1742044814,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":18492,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 39c3b3dd-de58-4d68-b711-3d495b6116ac
log_level: critical
event_category: detections
event_data:
{"connection_id":1854560,"detection_time":1742044821,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":19532,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c2829f91-4fd2-41a3-97df-8265612683fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742045098,"event_type_id":6,"status":"blocked"}


event_id: a83a91cd-176f-4923-9069-9afb5bf66843
log_level: critical
event_category: detections
event_data:
{"connection_id":1856835,"detection_time":1742045098,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57402,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 516c9d18-48a1-4d07-b0fa-637cc329bd1a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742045275,"event_type_id":6,"status":"blocked"}


event_id: d1677b32-12a9-4866-80e0-d4642284aa8c
log_level: critical
event_category: detections
event_data:
{"connection_id":1858400,"detection_time":1742045275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58435,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 16532e62-c8f9-44b2-9166-c6357deb76e6
log_level: critical
event_category: detections
event_data:
{"connection_id":1860879,"detection_time":1742045564,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":48081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7bd5de5c-1041-49fa-9f7d-4974ccde4755
log_level: critical
event_category: detections
event_data:
{"connection_id":1860951,"detection_time":1742045571,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":38296,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8920332f-7598-4293-8e26-b8bf1d2237c1
log_level: critical
event_category: detections
event_data:
{"connection_id":1861002,"detection_time":1742045577,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":25958,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f2f15446-774f-4e39-9910-2b1dcfac1a3e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742046068,"event_type_id":6,"status":"blocked"}


event_id: ac9a854b-e5cc-414a-90b7-ea3afc6f78e6
log_level: critical
event_category: detections
event_data:
{"connection_id":1865120,"detection_time":1742046068,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53937,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3641a4cb-2e08-4fbd-9d0a-0acc761b2cb7
log_level: critical
event_category: detections
event_data:
{"connection_id":1866200,"detection_time":1742046201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":52768,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8a2c2872-fbff-459a-9b6c-29bae2db2152
log_level: critical
event_category: detections
event_data:
{"connection_id":1866255,"detection_time":1742046208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":12140,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6e4dbbfb-571e-43ec-b5b7-3400a2174b82
log_level: critical
event_category: detections
event_data:
{"connection_id":1866305,"detection_time":1742046214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":19287,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c4e494c8-6cee-4945-a429-64e5cc0c33e3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742046553,"event_type_id":6,"status":"blocked"}


event_id: d21fdd69-1cd0-48c1-b59a-3573bbed7f32
log_level: critical
event_category: detections
event_data:
{"connection_id":1869160,"detection_time":1742046553,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51891,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1cbdb343-6175-417d-94f5-e56265c5db9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742046789,"event_type_id":6,"status":"blocked"}


event_id: 7f312562-d405-4814-b426-bbba510b132b
log_level: critical
event_category: detections
event_data:
{"connection_id":1871171,"detection_time":1742046789,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":59498,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6c0540e4-a8c4-469d-ba05-19871149133f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742047046,"event_type_id":6,"status":"blocked"}


event_id: 2702ac78-5837-40d4-a75f-e8369e5af955
log_level: critical
event_category: detections
event_data:
{"connection_id":1873326,"detection_time":1742047046,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50601,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1476318c-9272-4bf4-9814-7cba5f62b005
log_level: critical
event_category: detections
event_data:
{"connection_id":1875017,"detection_time":1742047246,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":58567,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 22ec2bc6-278c-46a1-9d29-e78fb4b265c1
log_level: critical
event_category: detections
event_data:
{"connection_id":1875075,"detection_time":1742047253,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":11012,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fecc1994-a7da-49a8-a7d0-6ee5d053d37d
log_level: critical
event_category: detections
event_data:
{"connection_id":1875129,"detection_time":1742047259,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":22426,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d76350e9-ea93-4714-a3ea-7b3028956a91
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742047290,"event_type_id":6,"status":"blocked"}


event_id: 6c6e4274-14e1-4481-af7d-24c6f6a504ec
log_level: critical
event_category: detections
event_data:
{"connection_id":1875381,"detection_time":1742047290,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40412,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ef599928-b465-4c62-ad4a-520f4f4a4bd7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742047528,"event_type_id":6,"status":"blocked"}


event_id: 7c7c73e0-83c9-4f84-a59e-696b5c2351d8
log_level: critical
event_category: detections
event_data:
{"connection_id":1877591,"detection_time":1742047528,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50258,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fca76e47-56a7-46e1-9863-03aa27149e47
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742047793,"event_type_id":6,"status":"blocked"}


event_id: 52c10a59-bc72-4b6f-afa2-e8740e0de386
log_level: critical
event_category: detections
event_data:
{"connection_id":1879838,"detection_time":1742047793,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49549,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f082c02-5084-46ed-b65c-7da766a99101
log_level: critical
event_category: detections
event_data:
{"connection_id":1880074,"detection_time":1742047819,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":44200,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b1f02478-6d75-4125-ab85-bf3b8944440f
log_level: critical
event_category: detections
event_data:
{"connection_id":1880126,"detection_time":1742047826,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":30763,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1e617cb8-7a96-4e77-9d6a-9965a162bed4
log_level: critical
event_category: detections
event_data:
{"connection_id":1880172,"detection_time":1742047832,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":17646,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 20a47d45-5f48-435f-ae29-e976fb9bdd32
log_level: critical
event_category: detections
event_data:
{"connection_id":1881808,"detection_time":1742048027,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":17750,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d7756d57-8f26-4554-b751-cc0caeb28858
log_level: critical
event_category: detections
event_data:
{"connection_id":1881871,"detection_time":1742048034,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":8070,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 384578d8-c7af-45b8-8280-af9ae2e24e22
log_level: critical
event_category: detections
event_data:
{"connection_id":1881920,"detection_time":1742048040,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":54211,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d03b4fa3-a769-449d-8ff8-cd109d7bb9dc
log_level: critical
event_category: detections
event_data:
{"connection_id":1882228,"detection_time":1742048077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"23.94.186.206","remote_port":33669,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 408a41ff-dc4b-4369-a3e0-38897b7d5b7f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742049010,"event_type_id":6,"status":"blocked"}


event_id: 6fccab16-cc80-4d4c-bbf7-d5f95eb56623
log_level: critical
event_category: detections
event_data:
{"connection_id":1890679,"detection_time":1742049010,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46828,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 55477b01-3ffc-41aa-8a23-4b7c2e963e01
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742049328,"event_type_id":6,"status":"blocked"}


event_id: fd5abeca-a62a-496c-89ac-aa7ef148c3ba
log_level: critical
event_category: detections
event_data:
{"connection_id":1893739,"detection_time":1742049328,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48735,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 07f2bf3a-fd39-447f-8fb1-2883754cb062
log_level: critical
event_category: detections
event_data:
{"connection_id":1895886,"detection_time":1742049582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":4676,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 94ce8236-b77c-4718-bef7-72d7a2f20808
log_level: critical
event_category: detections
event_data:
{"connection_id":1895994,"detection_time":1742049597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":27718,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a163b771-1a6a-47d2-881d-0e51592233d7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742050330,"event_type_id":6,"status":"blocked"}


event_id: 9e5aa956-237e-48d4-bb60-f486a89cf951
log_level: critical
event_category: detections
event_data:
{"connection_id":1901913,"detection_time":1742050330,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39358,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ee6f4315-8774-4a08-a6db-ecf57a4af619
log_level: critical
event_category: detections
event_data:
{"connection_id":1902716,"detection_time":1742050434,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":50799,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62b6a960-7b74-460e-8c3a-26aabc12ad5f
log_level: critical
event_category: detections
event_data:
{"connection_id":1902764,"detection_time":1742050440,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":22627,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 47a2de08-8c09-4258-b331-9d5a98254a18
log_level: critical
event_category: detections
event_data:
{"connection_id":1902815,"detection_time":1742050447,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":54147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a543bbdf-e0fa-44af-b749-01a5e8cb495b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742050832,"event_type_id":6,"status":"blocked"}


event_id: f243f51d-2dd5-4725-8976-e9fbdb25b539
log_level: critical
event_category: detections
event_data:
{"connection_id":1905950,"detection_time":1742050832,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48265,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1f2a1300-3b6f-4943-9d2f-8230354eda5a
log_level: critical
event_category: detections
event_data:
{"connection_id":1906755,"detection_time":1742050927,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":34147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 194aca1f-fdea-4305-a447-36221f03863f
log_level: critical
event_category: detections
event_data:
{"connection_id":1906811,"detection_time":1742050934,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":25196,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: afdff3ae-c15a-4b1c-886c-dc005d5671f2
log_level: critical
event_category: detections
event_data:
{"connection_id":1906864,"detection_time":1742050940,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":16481,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30abfa8d-5d3f-435e-a9be-365d87b37cc5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742050958,"event_type_id":6,"status":"blocked"}


event_id: ff213590-1412-4f6e-99af-df8dbd8f322f
log_level: critical
event_category: detections
event_data:
{"connection_id":1907034,"detection_time":1742050958,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42157,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d2063bf9-8510-431f-8083-493d91d691bd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742051450,"event_type_id":6,"status":"blocked"}


event_id: 296d6b89-11c0-47f2-ab08-f11117cb6e84
log_level: critical
event_category: detections
event_data:
{"connection_id":1911120,"detection_time":1742051451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42009,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7deacde4-c677-4a44-892a-3ab7e1935ef1
log_level: critical
event_category: detections
event_data:
{"connection_id":1913390,"detection_time":1742051727,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":3558,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 07530187-c7f3-48a1-8d80-1754fd0a3144
log_level: critical
event_category: detections
event_data:
{"connection_id":1913439,"detection_time":1742051733,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":53258,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cd08dc21-3907-48a6-9e7b-dd93f82e1741
log_level: critical
event_category: detections
event_data:
{"connection_id":1913491,"detection_time":1742051740,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":44565,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c31dd87e-04d5-49e4-82ec-5371fed00cde
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742051838,"event_type_id":6,"status":"blocked"}


event_id: f168c738-c596-482a-81f0-536ea9b1ab31
log_level: critical
event_category: detections
event_data:
{"connection_id":1914292,"detection_time":1742051838,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37071,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0174c814-63a5-418b-ab31-8ffe212f1577
log_level: critical
event_category: detections
event_data:
{"connection_id":1914718,"detection_time":1742051888,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":47945,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 37be4bce-2bd4-4719-adb4-c4d78b2c675d
log_level: critical
event_category: detections
event_data:
{"connection_id":1914765,"detection_time":1742051894,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":38628,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0f786007-ab11-41c3-9941-b82ecac6357d
log_level: critical
event_category: detections
event_data:
{"connection_id":1914835,"detection_time":1742051901,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":29471,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cc62add6-14cd-47ff-a47f-a848bc7aeaf6
log_level: critical
event_category: detections
event_data:
{"connection_id":1915741,"detection_time":1742052006,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":44779,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7a349cb3-ffac-4fe6-a5e8-b6256e03e275
log_level: critical
event_category: detections
event_data:
{"connection_id":1915792,"detection_time":1742052012,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":35428,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 66fd5e66-7be9-4bd9-aab1-ca6f8b2eb882
log_level: critical
event_category: detections
event_data:
{"connection_id":1915858,"detection_time":1742052019,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":26073,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ed2593bc-45cc-41b5-92d6-6121379bbf8a
log_level: critical
event_category: detections
event_data:
{"connection_id":1918387,"detection_time":1742052317,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":21219,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8b9ad858-23f6-45f5-add4-afc17c9f366f
log_level: critical
event_category: detections
event_data:
{"connection_id":1918442,"detection_time":1742052324,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":11736,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c2bc2940-b798-4933-8232-5f03172f254b
log_level: critical
event_category: detections
event_data:
{"connection_id":1918494,"detection_time":1742052330,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":1826,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cf91f08f-7591-49e5-8eb6-632bc9ed7558
log_level: critical
event_category: detections
event_data:
{"connection_id":1919924,"detection_time":1742052498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":9829,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 556d954c-775a-44ee-8f5a-978a37d8e6f8
log_level: critical
event_category: detections
event_data:
{"connection_id":1919980,"detection_time":1742052505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":58436,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 021da6a4-c0d5-4512-9d79-f2f27251da09
log_level: critical
event_category: detections
event_data:
{"connection_id":1920036,"detection_time":1742052511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":48375,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1d1a3236-2383-40cd-af6d-303caa644fdb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742052903,"event_type_id":6,"status":"blocked"}


event_id: 05dfe721-a631-4158-850c-86eadfe8c6f0
log_level: critical
event_category: detections
event_data:
{"connection_id":1923431,"detection_time":1742052903,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37559,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 293b2381-2682-480a-a2c8-ac02e3d15c42
log_level: critical
event_category: detections
event_data:
{"connection_id":1924911,"detection_time":1742053077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":57398,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 95ba8de8-d7cd-483f-9b41-2590c4965f2f
log_level: critical
event_category: detections
event_data:
{"connection_id":1924974,"detection_time":1742053083,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":44412,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8ad6565a-8fe8-4afd-8d78-0411f19afd03
log_level: critical
event_category: detections
event_data:
{"connection_id":1925033,"detection_time":1742053090,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":31709,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62bdd86f-3ca4-4f33-a86c-6edc260e1b7b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"63.141.232.125","autoblock_timeout":25,"detection_time":1742053111,"event_type_id":6,"status":"blocked"}


event_id: cc23ae43-253d-4bbe-88bb-107d054f6551
log_level: critical
event_category: detections
event_data:
{"connection_id":1925208,"detection_time":1742053111,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"63.141.232.125","remote_port":59090,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 901f3806-3eeb-43f0-87bf-d7bfd3c7eb3e
log_level: critical
event_category: detections
event_data:
{"connection_id":1925455,"detection_time":1742053140,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":49303,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 748452b9-6eb2-4604-8737-d59378b66548
log_level: critical
event_category: detections
event_data:
{"connection_id":1925508,"detection_time":1742053146,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":37726,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be429160-4712-49bd-acd5-663ae95ac179
log_level: critical
event_category: detections
event_data:
{"connection_id":1925561,"detection_time":1742053153,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":26070,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14942bd4-f437-4a28-af44-3789330f78b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"63.141.232.125","autoblock_timeout":25,"detection_time":1742053233,"event_type_id":6,"status":"blocked"}


event_id: 88720bee-5882-40fd-9776-5a9c579790ec
log_level: critical
event_category: detections
event_data:
{"connection_id":1926266,"detection_time":1742053233,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"63.141.232.125","remote_port":63973,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7fa52eeb-03b7-4d01-82c2-53ab6967a98c
log_level: critical
event_category: detections
event_data:
{"connection_id":1926433,"detection_time":1742053253,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":59082,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 918a9f8e-6710-414c-b2d4-593d21ab84ca
log_level: critical
event_category: detections
event_data:
{"connection_id":1926519,"detection_time":1742053262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":33280,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 08ac20fc-3124-498a-b2e7-8a7adb2cd4b1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"63.141.232.125","autoblock_timeout":25,"detection_time":1742053306,"event_type_id":6,"status":"blocked"}


event_id: bbd91438-d8be-4811-b714-875c2c870fc6
log_level: critical
event_category: detections
event_data:
{"connection_id":1926922,"detection_time":1742053306,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"63.141.232.125","remote_port":53845,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c86f4b0c-abbd-481e-9d2a-4cce21500cbe
log_level: critical
event_category: detections
event_data:
{"connection_id":1928214,"detection_time":1742053451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":12346,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d7c1c9e7-08a2-47db-a073-3b4a95fd2a75
log_level: critical
event_category: detections
event_data:
{"connection_id":1928265,"detection_time":1742053457,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":2304,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a6ad768b-ffd5-4b9e-8f25-810838cef151
log_level: critical
event_category: detections
event_data:
{"connection_id":1928312,"detection_time":1742053463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":50121,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 333b49de-85c3-4b3a-90ec-ca2eb033431b
log_level: critical
event_category: detections
event_data:
{"connection_id":1928491,"detection_time":1742053486,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":39107,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 65718b2f-c7a4-4450-b4a0-46f06b2e1242
log_level: critical
event_category: detections
event_data:
{"connection_id":1928557,"detection_time":1742053492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":30294,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 891aa24f-8930-449b-a1bd-7fad56b313d0
log_level: critical
event_category: detections
event_data:
{"connection_id":1928606,"detection_time":1742053498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":21064,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f9d9881e-6601-4005-8978-ed3b5536e0cb
log_level: critical
event_category: detections
event_data:
{"connection_id":1931178,"detection_time":1742053804,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":23755,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 686ffeaf-91bc-410e-bd37-b078fb7b5843
log_level: critical
event_category: detections
event_data:
{"connection_id":1931234,"detection_time":1742053810,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":2504,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6cdd006f-8f64-45c8-bb40-cd237ce191f4
log_level: critical
event_category: detections
event_data:
{"connection_id":1931294,"detection_time":1742053817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":43444,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4aa4163f-cebd-4cd7-834e-ffd008dfb126
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742053877,"event_type_id":6,"status":"blocked"}


event_id: 05c09d47-4125-40fa-965c-7df2d79293d3
log_level: critical
event_category: detections
event_data:
{"connection_id":1931804,"detection_time":1742053877,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35577,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: beee4e1b-2b94-43e7-a329-a41999ede5f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1933212,"detection_time":1742054056,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":29079,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ca89fc8f-b434-4c05-adc0-0871a0da5c77
log_level: critical
event_category: detections
event_data:
{"connection_id":1933266,"detection_time":1742054062,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":14869,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 05ec485e-6574-4774-9982-76d72307d1e8
log_level: critical
event_category: detections
event_data:
{"connection_id":1933331,"detection_time":1742054069,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":1703,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0119faa6-a13c-446d-858b-824f57aa177e
log_level: critical
event_category: detections
event_data:
{"connection_id":1934975,"detection_time":1742054275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":7916,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 26865944-c9b3-452b-a578-13ff6ae4c929
log_level: critical
event_category: detections
event_data:
{"connection_id":1935021,"detection_time":1742054281,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":46573,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b1bdad75-a84b-4eb7-a4c7-bb44c78dbb89
log_level: critical
event_category: detections
event_data:
{"connection_id":1935074,"detection_time":1742054288,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":26842,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 79bdf5b8-0c41-4917-9faf-20f54f5e68c3
log_level: critical
event_category: detections
event_data:
{"connection_id":1935164,"detection_time":1742054299,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":42427,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5aaf49c4-018c-4cd7-968c-1f2d3b3ce51d
log_level: critical
event_category: detections
event_data:
{"connection_id":1935228,"detection_time":1742054305,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":36446,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 42b7332c-81ed-408f-a531-69b98b3d49b7
log_level: critical
event_category: detections
event_data:
{"connection_id":1935276,"detection_time":1742054312,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":27983,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 10191ea4-392d-4218-a732-fbde12cdff66
log_level: critical
event_category: detections
event_data:
{"connection_id":1940477,"detection_time":1742054981,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":21895,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 37635d31-5b5d-4ac0-8869-9593f608810e
log_level: critical
event_category: detections
event_data:
{"connection_id":1940541,"detection_time":1742054988,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":20714,"status":"detected","threat_name":"RDP:Blacklist"}


