# firewall

event_id: 88cc8d40-c415-4787-9418-cea85c357664
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.155","remote_port":20951,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ac1665fc-53c6-414b-8704-3ab4b11d93c6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":138,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.100","remote_port":138,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 1f328479-0de5-40db-b9f1-b068676cea7c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":445,"path":"System","pid":4,"protocol":6,"protocol_name":"TCP","remote_address":"192.168.1.13","remote_port":57734,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: c146500e-391b-4d83-b1ad-8bd17f649e83
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.13","remote_port":137,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 828e93e4-1de3-4ef9-b968-054c86b8d03b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":138,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.18","remote_port":138,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: bffc2e7b-aebc-4a0d-9d22-3a5195d7edb6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":19371,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a4f2c833-939a-4d09-8dfc-1053ca8e1f44
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":37440,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a8bb30a0-2355-41a1-a177-bc7a25ac49fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":1129,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a0bd4aed-156d-4713-8fa2-a842cbf8aac7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":138,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.13","remote_port":138,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 6383221d-9e0c-4357-a1ae-7ffba303b793
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":52120,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 55df597d-5c2e-4460-9803-b8e92132eb29
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":24671,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 898d0d10-1911-43e0-8b11-2753849c4fb8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":48510,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d088831e-34c7-4106-b2af-4de4ab9525b7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":33020,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 422be39d-a166-46ac-a6d3-e870f09faa80
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.100","remote_port":137,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: c478a622-6d47-4758-b358-8878452e8e8f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":24107,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 606b74c3-bdb0-4f75-a1b5-5daa044c4e71
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":49790,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a03b3173-75fc-41b7-9ed5-9fe3130e65f8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":13656,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: eb7986cf-277c-4771-abec-5c625a091928
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":60472,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c860e43d-c9d9-4b24-8c23-f46312c2c47d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":58492,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dbf81df2-2fc7-4688-9b3e-bef3262aa9bc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":49419,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 525b129c-76ad-4c88-8384-a91e0c2e416b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":58289,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 04ca64c1-ddbb-4f02-b6d1-0f531eb052ac
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":53418,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c87b2e44-df41-4b98-86ca-0d565fe556a5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":4699,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a2123129-dd60-4f3f-9c42-6d3fd7a60de6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":19317,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e0afe1bb-08b7-4eff-9e11-3b66c5100897
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":59661,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ae0f3322-2ebc-4c55-9601-ac40a25e049a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":42111,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d09363d2-e384-4462-ae24-29f17d87995c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":31150,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 98ca15a2-4000-403d-b9a3-4ba4b63eb0ac
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":17864,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 651dc8e9-0059-4bef-b560-24fe8d8bb8a4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":45094,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b58ee1db-7a56-4dd1-97a0-6a432442e376
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":46663,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c1aca6c0-1dbc-4c37-a9df-5561a94d1bb3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":33379,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 463a4474-f067-4f57-aa05-4322ff1bb2db
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58797,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e1887e00-7873-441b-abbd-49cb31869f38
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.248.163.181","remote_port":49704,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b4570259-873b-4e86-a826-3a08bbdcc08e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":54562,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b4456a99-a615-4a50-96eb-1b8927656bb7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":11871,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: af43c632-93a5-46f9-863f-c789088e2a4f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":28587,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1d7767bd-d61f-4384-af80-976244e6d2fd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":15346,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 52bcb246-f8af-42b4-880f-ed9191b79288
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":9836,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 547eaaf6-7193-46ed-809a-f57ef1ad5832
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":9948,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2ae64947-b9e1-4d06-b307-54f7577e50af
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58440,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d63157c5-d7c6-4df9-847f-533616fb4c5b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":35566,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 012c6020-fed6-427c-888b-50844e5440a6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"193.200.78.21","remote_port":56288,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 525f09e8-7d64-41aa-b1e9-d2d67fc55d16
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.125","remote_port":42449,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 71d7aa19-59ef-42a1-afa5-fb371454bf5f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.125","remote_port":50050,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fd22fea1-306e-4a85-b60c-67708d9f231c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.125","remote_port":59457,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e5b5f353-6b53-433b-aa84-0d5f25225138
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":2021,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a064780b-f107-49e9-a7c3-18aa2d2071f9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":53159,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ae4362c4-2ac1-40c8-bd59-d2843ede35c9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":10490,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 510306a8-eae6-4254-bac6-6ef6b71a4a9d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":8635,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f6e3d44b-202e-4ec3-a1f7-eb0e5c063234
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":23383,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2b14251d-7427-4e86-bd35-a8a559bca069
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":35322,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b45939b8-364d-4600-9d94-f44c7d331939
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":45303,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3bcd9156-1e43-48d7-a446-9f5ed8ff9c0a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":56596,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c7459d75-8f56-4082-8ddb-8471020e73ab
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":6784,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 06e14693-a67d-4ad7-88f0-9a41ecba1087
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":52319,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9bf73c3d-6594-487d-b659-2c98cdbc0546
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":38555,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c5015382-46ff-41b0-a774-996f34ff1368
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":54646,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 86a2359f-373f-486c-b97c-3bbe78b64e3f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":55446,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3596e395-2c5c-4472-9c2e-9f0f58d38489
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":30375,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 47d565b8-a6d1-4d6a-9afc-00b09d3b693c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":31202,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 80a5ac38-ab65-4754-84c1-ddfae045636c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":32329,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 99a53193-7ca5-413b-85ac-1df43759c05e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.164","remote_port":25718,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b7075ce8-505a-48bf-a9b6-35e828793039
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.164","remote_port":16376,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 94e82a09-6ea9-45e0-b535-6307b98bc5b5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.164","remote_port":5461,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 706f925f-62f1-4774-95dd-408f4500e22c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":35269,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e2adfb07-caeb-448a-bc9a-edfc2250d0d5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":54819,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 87f66d09-5b40-4f14-8dde-7c32093adee0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":22471,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3a868483-0562-4d6e-93e3-549e53f63f2b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":31856,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e7ac8ef2-7c63-46ee-91f1-7666c3bdb4dc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":45264,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 22dd2c2c-95a3-4aa9-94bf-9189b5278e4a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":44291,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b5bb7472-84d6-49de-8267-920e1d267928
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"185.200.116.75","remote_port":42981,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 46d3dd19-1740-40f1-a839-704aeb6477ed
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.163","remote_port":7061,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e6331c2c-46af-40a5-ae67-357e6b5a662a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.163","remote_port":59384,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dbaadbc7-85cb-45bc-b4ce-fb13078b700c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.163","remote_port":52834,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 669b4e90-7667-43d2-84ee-4a2b1975537a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":53705,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d007819d-ab22-4abc-9fb8-f494622e6e02
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":35239,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f303f600-dae5-4753-bc4d-2b293897d155
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":12366,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c0a13f84-fa14-460d-ad75-0ef8152e4a9a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":22536,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 06d45e03-9a9a-4907-81c1-7691ec444d55
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":34334,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 98150196-10fe-4237-bad2-c1e847491664
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":51703,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f1356198-2a19-4dde-a948-3b714d536076
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"193.37.69.105","remote_port":64817,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 187f3d57-1f28-4a02-a783-bddadd81fadd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.248.163.181","remote_port":54381,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6a82648d-c242-497a-87b7-570be95f5e45
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":50962,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 78a27687-49d8-4636-9cd1-1047d924705d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.125","remote_port":59761,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 97fdae77-1eb9-442c-98f6-92493862887b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.125","remote_port":6680,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fa8fc039-2192-48b2-aabf-ef2467e785fc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.125","remote_port":13479,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6ddc8ffe-c9d9-4516-8a4e-78fee7b92c53
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":55804,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1c1ff661-47c1-4de0-bf7e-14584eb35810
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":54494,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 95628b20-6d88-4ea0-a1e4-6484ffc9eb61
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":55737,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8c708703-e3c2-4711-b679-566b5bc6f1ad
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":18504,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bec0e9ce-5f84-48ca-8871-98695c14bd20
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":27778,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c1c737cd-cdf9-4b7b-8b50-1f0d39c0ecff
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":33848,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7149e7da-818a-4797-b016-086d51b70e98
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":54090,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2275e385-bbd3-4d19-8e3c-4756e8736754
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":36095,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 14fe57c0-ea8e-48eb-81f6-1f1c8099623b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":32239,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3dbf6e56-043f-460f-aeef-4846ab530367
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":31258,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 614d4ebe-bbda-4814-8960-7ae206323e22
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":48007,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2704b47e-2070-4e69-b9c6-a95f0f0b48cc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.161","remote_port":41251,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fb2acb28-005c-4e70-ad09-b24f7496f0fc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.161","remote_port":28192,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 47bb0b58-bd03-4e23-a994-ec9448fd5f5b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.161","remote_port":15836,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4826c9a1-71d2-459c-ade7-6472deb506bd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"205.210.31.96","remote_port":56371,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fd7c5f3f-5465-4e49-bc69-00c95cc3e8a9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":36783,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 31c3e1fd-767f-48a6-a94f-958b074df48d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":44689,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 909cda31-787d-4729-8fca-888d4d1711e8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":54100,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8ac05558-c53b-453a-b5e5-606b9968f7bd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":25440,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f1c9302e-54fc-455c-8805-9628ec3d44e0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":11781,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 47a6f9a6-44a5-4148-bb1a-d54ac90c2594
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.162","remote_port":55337,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e9e97bb3-1569-481e-896c-4d6f3df8895c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.182","remote_port":50749,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d87fcc3c-4b6f-4c5e-8122-e3227d85c8b2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.182","remote_port":58573,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c7713a13-57c2-4838-ac9d-2a8cc446c936
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.182","remote_port":9124,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: de8af7d7-e399-4a36-badd-ea9e8813d855
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":54621,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e65cd166-77f5-47a4-a146-ff9a02020f1f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":6282,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 75016861-2421-44e7-b997-c4f7d6475567
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":14948,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e73c51bd-0913-40f4-9af8-ba166bce5368
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":28628,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 837db056-0dfe-4aa9-a5fd-2eb6e2bbdeb9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":35700,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6e777f0a-bc67-4f9b-9968-36c2315bb193
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":44723,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9e836913-1b20-40ae-8103-c51e70cae296
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"205.210.31.250","remote_port":55626,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e3c31f6b-92f0-4a19-bc6a-0d43279c915a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"205.210.31.250","remote_port":63758,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fb667f39-13a9-4827-9948-4b9aec9bf2ca
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"205.210.31.250","remote_port":63770,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b31a3587-e4fd-41d6-9e3f-5aa2b07491e7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"205.210.31.250","remote_port":63776,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cc75fb26-16f1-4be7-96a9-03750bc6ec78
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":45040,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ea0def07-9bcc-4f6a-bf86-49ed20817ef8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":43750,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f3296a59-c7aa-48c0-be22-710f3fefc66a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":37973,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3253a231-23a8-4d3f-abbc-cecae3e5f45b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":51229,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9bb55b36-c20f-4146-8905-626b889d8dd0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.183","remote_port":3455,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 33aa2428-d9dc-4692-a008-8717d286740d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.248.163.181","remote_port":58950,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bc1d3120-7ee7-427d-baa7-52f0318fbfd8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":55246,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2a71d659-cd25-4630-a759-cdd061b3ca9e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":17969,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d61996aa-88d9-454b-bad1-9ea51098de2d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":23327,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a74d6bb4-0681-4003-9c46-43f013cf5ddd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":30190,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 34668f3a-34f2-4a56-9140-b35732c45a90
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":10328,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f868088e-a801-4735-a1b1-6a9d56790b87
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":4763,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3fed03f6-ab49-4fde-9cb4-eae4d284696c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":55940,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: baf98eda-89c2-4c08-91e1-8839fe66652e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":41278,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ab400656-45b1-4de5-8124-0528a1f03098
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":36425,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4db05077-3414-4ffa-ab4f-841e9bec97f2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":39474,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e504dbe5-d19e-4165-b0dd-c3bfbb04bfc8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":47039,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3cc9cbf6-f67d-4273-8766-ec8de95f4ecf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":41283,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8ee1e368-4109-4711-9baf-aa525c1e09db
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":33586,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 795bc4da-5367-41cb-b10f-486b17ed8cb2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.96","remote_port":24146,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 96991e75-33ee-4921-9ee3-834fd118ac0a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":52399,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 53454543-6863-40ce-9781-5f8d4b5d5725
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":7220,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: da602ba9-b5d6-44f9-93f0-939c0784d699
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":18431,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 12c8dd6b-2b6a-4b05-a008-967e9a43a1c7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.152","remote_port":18165,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 741a7fa7-5471-4ba5-903a-8970e982c771
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.152","remote_port":5858,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c434d706-aba8-4f68-a48c-b238ad23335a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.152","remote_port":52231,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5079fa20-6357-488a-8d4c-d72a2ab2a951
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.166","remote_port":30169,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4d42cc3e-d165-4b8e-a942-2c4aeb7e48e2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":37424,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 913b7156-9297-4ed8-b87f-01fa155a50a4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.166","remote_port":17614,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f3c29c0f-7f45-4076-b5ca-3466f4741e87
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.166","remote_port":6939,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4184b71b-3650-4420-b0e7-21885bbdf3d3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":38697,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f410b25d-8e06-497d-a287-ed7bd0469f4c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":34966,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e57f74a7-9c16-4d66-82e0-41fb6750d7a4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":8095,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b22dd4b8-e3f2-4a06-b585-b421aa97d562
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":21805,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5c7f382a-8417-4f95-ac10-bcf9279681f9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.187","remote_port":30572,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b547a871-8741-4a62-90c7-7698decd1c23
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":48149,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f985754d-7e48-4f9d-b946-9fa3793d8173
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.182","remote_port":33564,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e5b2497f-b799-4baa-80e7-7faf0707dac7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.182","remote_port":41017,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6bee3b72-9987-44c1-9aae-e4911f521938
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.182","remote_port":55079,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e777f7c2-22c0-401f-8eea-2a2f312069a7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":33162,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1f0ee7ec-607e-44c1-8147-2806bce7e95e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.167","remote_port":25137,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0e53cbd0-fd61-44d0-a174-efd269358ac9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.167","remote_port":15790,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ec580dbe-ad87-4f0c-afa9-2d437f360ac0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.167","remote_port":5657,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6a22bfcb-a62d-4458-b6e2-d0c2f31b9b3f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":40148,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a19c96f9-fd1c-471c-9975-084416a69805
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":24846,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5143a5d0-8b0c-4c1e-8c34-a7246fc476fa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.151","remote_port":11255,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1d54d860-d7d1-4566-855b-a927040dafaa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":57871,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7134af91-c46e-4bd5-a3da-603ce1a2c901
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":38909,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3ccadc62-894f-495d-b4c0-a3f45a0f17e6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.92","remote_port":36660,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dbad4065-4f0a-4550-9f95-e5641152c583
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.92","remote_port":48168,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bd99f63b-4217-4830-915c-2fe6efbdf2e0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.92","remote_port":40659,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 63dd10e1-0e9a-4230-a1ed-89a9125fec78
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58840,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 72949795-7253-4b48-a4dd-9c30fe458832
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":49129,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 73ffd753-7d7b-4984-ac6a-c656011fa334
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"64.62.156.19","remote_port":48302,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c82ea2d7-5016-402e-a9ba-5301209b51fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"64.62.156.14","remote_port":33041,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 46260ceb-5521-4be3-b484-331a4b7e9dad
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58169,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d1f7672f-f507-4233-9713-194203b3f3ab
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":57913,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7cccb4dc-d773-4fc3-a6b4-215a3199c057
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.152","remote_port":16381,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d20118d1-e1ce-4ff3-b77e-f1b3b432d946
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.152","remote_port":3291,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9281d07a-3b1f-476d-9c0a-e96693b0f361
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.152","remote_port":50616,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 31d506ac-d945-481b-b8c2-2a7aa1a041fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":57380,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: df58d61d-be41-469a-9a85-f1ac4aaf8cf5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"2.57.122.234","remote_port":32866,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c931be48-e1b6-46cd-ba79-6bbb94ee6726
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":39497,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b3c3f8b7-3315-4945-a72d-7cdb66c3ddc1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.165","remote_port":10449,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8a6a868a-ff3a-4349-a20b-1da890b9b7ad
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.165","remote_port":54911,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b0807293-5f70-4a33-9b73-f9cde3b86425
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.165","remote_port":41422,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4e536ce4-332c-41be-a1f6-e0ee51b91a81
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"103.169.34.84","remote_port":43731,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 871c7910-9a86-43ef-a8bd-6f4fd3153931
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":57406,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9f6e57ce-baba-4585-90b4-ecd0b7705d99
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":45166,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3a4394b3-243f-4b37-8332-9a8f2fd96e2a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.95","remote_port":31691,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5c01e63b-ce26-4f77-a743-5418f5551bcc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.155","remote_port":24180,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1703c5e6-cd49-4c2b-bb08-68521328b665
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.155","remote_port":12931,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b5f9c254-bf3b-4988-af78-920f62374d89
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.155","remote_port":59355,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 703846da-1def-4218-a080-7f2b620e4603
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":49178,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9b6d040f-bd0a-4f3f-b201-485224588230
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":56512,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 56be686b-364b-4cf3-88d6-dedcfa17c749
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.248.163.181","remote_port":43450,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 907285b3-6ab9-4f2b-a1e6-b1d5a8c7a55c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58520,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e6847882-022e-43cf-ae21-1e96f2b5dd62
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":8299,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 93e45145-9cf2-4842-9887-d68c1d7080da
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":15283,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d775f92d-b14d-41a2-bbd8-cf73e2e2a624
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.121","remote_port":24322,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2d26d2e7-86a2-498f-90b5-9e383d0ddd6e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":54915,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 80d0e068-7a55-41a2-96ad-9b7de50717d9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":39946,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 86b6502e-acf7-46ac-b3c0-98d1a760332b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":13331,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 57770d87-bd12-4732-bee8-6d2871553df2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":8347,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c3fb35da-5505-4788-b0a3-5e920b7bcf3b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.93","remote_port":3176,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7927cc91-3198-4585-90c9-23cc9b5f5b57
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":54179,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 76a0ffd1-42d7-4e07-8bdd-dce57905f9c7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":48738,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2eb6284f-718d-4a84-9095-e4c66a5e7174
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":31557,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f858dfd3-5f8c-44e9-bddb-6cc2094dbe51
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":33400,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a2ae9f66-1cf5-44af-ab8e-ed8eef08ca38
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.184","remote_port":36983,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2ee04d81-3c31-407d-bbee-b8a5027d1283
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":57734,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 89a34998-e969-446d-acb3-3470527d2152
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":41776,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0f216aa1-74ff-4fcf-8340-ed5aef760e26
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":50139,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 93e252be-a2cb-4fe3-96d3-68c7a65f4a72
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.123","remote_port":58633,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7f6906e4-49d1-4f11-b03e-7ef0ac258d3c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.156","remote_port":36870,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 03b76c9b-4902-4682-9fd8-5b5c810298a8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.156","remote_port":27336,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a2aa1227-537a-4ea0-b101-abb2621c4642
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.156","remote_port":16237,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4cd9e010-9f5d-478a-9d6d-4913b28e7af5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":53902,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fcbdcaa8-f5b3-4107-a5b9-ecaa27600f85
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.160.246.90","remote_port":44321,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 94e10d95-f495-464b-a959-0ab51b216dc8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"109.205.213.108","remote_port":44985,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1617109a-1b23-424c-abe8-8d0f9e17d883
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":39076,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d8568810-aaf8-4c77-b26b-38d24bf175d5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":53204,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dabbcb09-63b6-4580-a74f-6b4caa97e26e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":37382,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2a49d62c-d92d-4c7f-9337-c675175c4929
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":49129,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 943d9801-2970-4a00-820c-86998b5de6bf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":56384,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4e4d6666-d3be-434e-8bc5-51d7091cb655
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.166","remote_port":17289,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d907268d-8fc0-48d0-8617-722c7a07bd90
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.166","remote_port":6857,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cc2dd978-4dea-45ba-a37d-c58967d147ce
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":11409,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c59d5f7f-a52e-411f-bb25-0ed8702002ea
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.166","remote_port":54607,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e97d0e38-6afb-4533-a10d-609f46bc36c4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":21421,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 190a519d-7acd-4680-a0e3-3256472f6a60
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.186","remote_port":29290,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 665fd0df-c436-42a1-88ff-999cffbe7fbd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":48354,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ec492832-ed88-421a-a107-131228e327bd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.124.62.62","remote_port":55918,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 483049b0-deb5-4d26-8fbe-d5a0db6e9738
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":52524,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c7e0f72e-e984-4663-bcfe-430e9f2929fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.248.163.181","remote_port":48049,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1bce975f-08aa-4399-9e2f-bb3595baf142
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58077,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8c477d9f-a294-430e-afe2-5237ba0c4019
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":51970,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fb13f8e2-bb9a-4596-980f-8387c6f7f138
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":3958,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 551a83d8-eda5-4445-acad-a1b401c2bd87
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":16565,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ae8f3d74-3ee5-4a71-a0b7-66913e97d65c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.185","remote_port":27412,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6e7794f2-35e6-4d22-902e-ac4bec20bc61
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":39219,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1d71fa51-3459-40f6-8230-d02f4ee9e911
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":50933,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3b208fb6-1fee-4ba5-82ac-543979e5a340
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":8657,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bf95e8e6-0964-4b99-b8df-7b1ffff1139a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":59908,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1fafbeb9-a6e2-4648-916c-7cbd42562ff0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.94","remote_port":54385,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c813a56b-8bc1-4791-8cf3-68de4cc51472
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"193.29.13.50","remote_port":63697,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 41901c60-cf2d-4c93-be8f-6df289f669d6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":49742,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2069d156-cd02-4b22-ad32-d09ca197c6cf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.164","remote_port":51444,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 346ff219-3e99-4d1e-a459-c790a6d5930f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.164","remote_port":37242,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 25dc28d9-314e-43a0-97b9-2cc716e9b213
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.164","remote_port":24166,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 813fced8-6d51-4c12-ae07-a74e53ae70f8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":7163,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e4036b66-a566-49cb-83ea-9db573a09242
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":20176,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e0de2709-4a1c-4194-a2ee-c8f4479c5fc1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.181","remote_port":30189,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0c8fc6a6-edf8-4808-9238-26778d21300a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.160.246.90","remote_port":52117,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b3b81aab-eea9-4e10-a294-85ace6fde40a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":39966,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fe087e3c-5f27-45d1-81da-367002a4809e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"149.28.140.245","remote_port":47964,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4f8783e8-0390-47b7-8c13-833b46e24242
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":48757,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f5f6d6dd-34ba-42ae-9823-550f6fcb63ae
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":45449,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e9ac894e-a60a-4dc7-96c3-bc40d503f0c7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":47360,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 625d521b-ece9-480f-9b66-5f40c44cfdda
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":49248,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e023f6b4-d197-4c1f-b535-4cbe29d49474
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":50306,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 73d0ccbc-1b27-4cae-9146-b6bf8a59013f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":51020,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ea329915-9e99-4add-b704-3e3b7abddfc3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":52548,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 295e70da-2d30-4f59-916c-9f35e74a7f5f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":53850,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b7231ac1-ae40-4895-b978-d5ede2bd9baf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":55746,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7abfff18-bbe0-46fc-b096-c9c979d6d31e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":56436,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c7e7fadd-1fa1-43d1-8daa-75486d8b3fe1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":57376,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c2ebf226-876e-489d-93b0-e82534ac36bb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":58704,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a8c17a55-6e68-4094-95a8-4cdb4e435ffb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"118.193.59.4","remote_port":59450,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 904b019c-de95-42bd-a16b-d7039817a44b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":11344,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bb552586-d64e-402c-a1f6-cd6cd20037d1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":22790,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a6393096-1c59-46df-bc53-2c786f6e1847
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.124","remote_port":33094,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fd7d6b66-a759-427b-add2-388862c04ca8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":58436,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6e05c498-4339-4d97-9486-389f3302898b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":46151,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f8d9269f-ad31-4b03-bee2-e678d016a6ac
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"213.209.150.54","remote_port":30146,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6099c951-3f93-48bb-ba6d-234b191ecc7b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"213.209.150.54","remote_port":30279,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3db0c756-0332-4b88-9fc8-16c385c9cc24
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":40357,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 49cba7a1-6fa6-4fec-a553-1d5d10e90197
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.154","remote_port":40168,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3af48527-d963-416f-8a8e-2cea99998963
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.154","remote_port":11881,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 74ade28e-49e7-4b8b-83f7-6e48ebb86fe3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.154","remote_port":45541,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 26cc7a3b-17df-4523-a33a-37252a1a6fc2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.163","remote_port":46158,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5b362409-def7-4006-bc05-46cad8ec848d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.163","remote_port":35635,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 31f68237-49dd-4d0f-85fc-b1401f1786a4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.163","remote_port":25592,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 54f81d6c-f825-4cd8-979a-71741360e65d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":50185,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: aa97b87f-d0fa-415a-949c-12c29b43b25e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"23.95.197.211","remote_port":42868,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 038dc30c-f4c2-4aef-8c4f-8614872a62c2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":43974,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 682c0d97-429c-4a43-b26f-78aa041d0d9b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.161","remote_port":40134,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 71318f8d-53ec-4fef-8bd8-62b5269b76e4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.161","remote_port":29258,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 57ed746c-3c55-46d0-9cdf-425d485f4d3a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"194.165.16.161","remote_port":15725,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6f863a3d-17fe-4240-bb71-d5252aef1e01
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.248.163.181","remote_port":52187,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 66bb58b8-6f40-4f32-9a11-2f970f9beedd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":53438,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8dfdae08-c9d6-42e7-8da7-026af5ac425f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":3587,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1c2a2352-1560-45c2-8820-bad4b414810e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"88.214.25.122","remote_port":18458,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e108e270-a6c9-45fd-98e2-3a9dc6c8bd79
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":59622,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a3e85ae4-5593-4b90-8b8a-e10454bae999
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":42926,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 971f3a81-e908-404f-ac72-4968f3663d0e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":32735,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 375c9d92-4fad-4770-a2eb-5fb817e858cd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":46000,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f608ee2e-8378-4ddf-bbba-dccd127a2bac
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"147.45.112.188","remote_port":55818,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: debd8c9c-428b-4125-ac2d-5ab8043918c9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"110.171.40.33","remote_port":40775,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


# intrusion_prevention

event_id: c769a638-1809-4c6e-8529-5ca6cd7d3311
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993906,"event_type_id":6,"status":"blocked"}


event_id: aff49737-e763-4746-83d5-38ca6e5e8a17
log_level: critical
event_category: detections
event_data:
{"connection_id":1613383,"detection_time":1741993906,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":63347,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 802003e8-a524-414a-851b-58efbb11d0a4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993923,"event_type_id":6,"status":"blocked"}


event_id: 0ba40cf9-794c-4ce6-be2e-3b79adee649f
log_level: critical
event_category: detections
event_data:
{"connection_id":1613447,"detection_time":1741993923,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":51212,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 90659785-0db7-4a94-ba57-e21d2c471094
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993932,"event_type_id":6,"status":"blocked"}


event_id: b417df37-33d6-4cfb-b648-acbf404c52d3
log_level: critical
event_category: detections
event_data:
{"connection_id":1613463,"detection_time":1741993932,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":62924,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de9cc8e5-4b56-46cb-8c1b-a73a7cd2ba4c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993942,"event_type_id":6,"status":"blocked"}


event_id: ef59e732-5ad7-4773-bf62-e240bcddbdd9
log_level: critical
event_category: detections
event_data:
{"connection_id":1613490,"detection_time":1741993942,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":56115,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dd640fd9-3faf-43e7-89c4-f1a7c29d5be0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993950,"event_type_id":6,"status":"blocked"}


event_id: a4b32c38-bf55-4df5-9bf9-912a3009a6eb
log_level: critical
event_category: detections
event_data:
{"connection_id":1613527,"detection_time":1741993950,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":50732,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a036e654-06f9-4e81-b96e-1da347bb3c9f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993968,"event_type_id":6,"status":"blocked"}


event_id: 91cd1525-92d6-4ef7-958e-d6fc9bb2d875
log_level: critical
event_category: detections
event_data:
{"connection_id":1613559,"detection_time":1741993968,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":56363,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6ca8f5e1-77f6-4aa2-99bf-d8bef0e953e1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993977,"event_type_id":6,"status":"blocked"}


event_id: ee784c59-2ce4-4b6c-ae6c-dc69f5b85a46
log_level: critical
event_category: detections
event_data:
{"connection_id":1613592,"detection_time":1741993977,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":50199,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5fdd1a1d-c768-4419-bea6-e2d79bc4c176
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993985,"event_type_id":6,"status":"blocked"}


event_id: 5da3a1cb-0d97-49cf-903f-1dbbdb621179
log_level: critical
event_category: detections
event_data:
{"connection_id":1613619,"detection_time":1741993985,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":62090,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5760e05d-942e-442a-9154-7bfe1741f08e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741993994,"event_type_id":6,"status":"blocked"}


event_id: 2ba0ed72-bf70-4d40-aa43-5296722f3df0
log_level: critical
event_category: detections
event_data:
{"connection_id":1613659,"detection_time":1741993994,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":55785,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a80f1eb2-3017-42d6-a977-dacd37f665c4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994003,"event_type_id":6,"status":"blocked"}


event_id: 069239f0-effa-47af-bad7-813bfff2fdda
log_level: critical
event_category: detections
event_data:
{"connection_id":1613674,"detection_time":1741994003,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":49638,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f9006e3c-7c44-442d-b2cf-bf972d7261cb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994012,"event_type_id":6,"status":"blocked"}


event_id: 3c432ce6-21d7-4a10-bf5a-7a5dc01aa69a
log_level: critical
event_category: detections
event_data:
{"connection_id":1613696,"detection_time":1741994012,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":61437,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9d26ce19-7dfd-411a-9f24-d481550fc6db
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994039,"event_type_id":6,"status":"blocked"}


event_id: d49f27bc-96ec-45c4-b561-8a46c4660f4c
log_level: critical
event_category: detections
event_data:
{"connection_id":1613774,"detection_time":1741994039,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":61155,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2eb59862-a93b-4c04-ab0c-60bb30a5c28a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741994042,"event_type_id":6,"status":"blocked"}


event_id: 4d0712bd-9232-4e3a-a017-28e8cc6015e9
log_level: critical
event_category: detections
event_data:
{"connection_id":1613782,"detection_time":1741994042,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 73181822-0e3f-407e-9960-fcdadf30169f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994048,"event_type_id":6,"status":"blocked"}


event_id: cdc3fadc-0129-4622-b0ff-e596d0186966
log_level: critical
event_category: detections
event_data:
{"connection_id":1613800,"detection_time":1741994048,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":54971,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d5d27570-973d-4d7c-8405-72c51e8ebdd2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994067,"event_type_id":6,"status":"blocked"}


event_id: 836c29cc-3df0-451c-9944-2fb22707362d
log_level: critical
event_category: detections
event_data:
{"connection_id":1613858,"detection_time":1741994067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":59427,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 813b1176-fa5f-41e9-a42c-09b68fd3ddcd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994075,"event_type_id":6,"status":"blocked"}


event_id: e808ee3a-ae20-49f8-9d2f-06029a8cbf40
log_level: critical
event_category: detections
event_data:
{"connection_id":1613886,"detection_time":1741994075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":54343,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 05181a60-6318-4e6c-bd8f-ee68ea7e5523
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994084,"event_type_id":6,"status":"blocked"}


event_id: 10e1427e-217e-4872-a2cd-d3a0747fe6aa
log_level: critical
event_category: detections
event_data:
{"connection_id":1613902,"detection_time":1741994084,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":65409,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4be54746-ebc1-466e-ae12-4f90fc9753e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994103,"event_type_id":6,"status":"blocked"}


event_id: a76bc8ce-d067-413f-bc98-0a5546afea17
log_level: critical
event_category: detections
event_data:
{"connection_id":1613964,"detection_time":1741994103,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":53868,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0e7281cb-578c-4984-8aeb-fc964578b642
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994112,"event_type_id":6,"status":"blocked"}


event_id: 96cc87a0-3d2a-4f6f-b9cc-8f30c9e6382b
log_level: critical
event_category: detections
event_data:
{"connection_id":1613990,"detection_time":1741994112,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":105,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3e42a128-eb21-4ad0-9a20-c103648b2948
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994121,"event_type_id":6,"status":"blocked"}


event_id: 774044c9-998b-417b-9436-05fc9296e272
log_level: critical
event_category: detections
event_data:
{"connection_id":1614018,"detection_time":1741994121,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":59468,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83edb113-ff54-4dfa-a08f-9de19a1b7f7d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994130,"event_type_id":6,"status":"blocked"}


event_id: 22fb5a31-b151-4946-a344-13b44fc58bd8
log_level: critical
event_category: detections
event_data:
{"connection_id":1614041,"detection_time":1741994130,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":53442,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fa537e10-cd7c-4112-9d39-773948d6ee78
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994138,"event_type_id":6,"status":"blocked"}


event_id: 97da77fc-e248-47f0-b83f-5b72e805311c
log_level: critical
event_category: detections
event_data:
{"connection_id":1614062,"detection_time":1741994138,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":65167,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 393aed3a-ddd4-43b4-b0a8-39b9a14af5dd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994147,"event_type_id":6,"status":"blocked"}


event_id: 50dcbf09-cb09-4a1d-8ec5-eae0f3a8f8ce
log_level: critical
event_category: detections
event_data:
{"connection_id":1614104,"detection_time":1741994147,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":58968,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f75a475f-e648-41db-9eb0-094fd11b5143
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994156,"event_type_id":6,"status":"blocked"}


event_id: 86cecce3-28aa-4296-aaa0-45dabb3c2c1f
log_level: critical
event_category: detections
event_data:
{"connection_id":1614125,"detection_time":1741994156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":52903,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 71c4483e-9543-4cfb-aafd-074bf5acca71
log_level: critical
event_category: detections
event_data:
{"connection_id":1614136,"detection_time":1741994161,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":14962,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8d184a7-0884-4ce1-a6a4-d4692af6e535
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994165,"event_type_id":6,"status":"blocked"}


event_id: 42c1d12b-8e2f-458d-b4e4-0a9bb345eee5
log_level: critical
event_category: detections
event_data:
{"connection_id":1614145,"detection_time":1741994165,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":63323,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 383ef5df-1e1c-4168-8e02-abee6a8d3b49
log_level: critical
event_category: detections
event_data:
{"connection_id":1614152,"detection_time":1741994168,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":56445,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b522be3a-1e47-471d-b3f2-446db6a2d45f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994174,"event_type_id":6,"status":"blocked"}


event_id: 592618c0-c1b9-43b2-a580-cf11e7f96d12
log_level: critical
event_category: detections
event_data:
{"connection_id":1614165,"detection_time":1741994174,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":58481,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 876554d1-92f7-457f-9652-f7878da344de
log_level: critical
event_category: detections
event_data:
{"connection_id":1614166,"detection_time":1741994174,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":39912,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9d3067c3-96dc-4b9b-b53c-86d0e870a1fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994183,"event_type_id":6,"status":"blocked"}


event_id: 46949a74-651f-48f5-8c90-49ab5ed402ed
log_level: critical
event_category: detections
event_data:
{"connection_id":1614196,"detection_time":1741994183,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":52298,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 55dc1868-5872-4236-882e-0548f9c7fd31
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994191,"event_type_id":6,"status":"blocked"}


event_id: 104ba1a8-eeec-4ac4-b460-1f754a00961a
log_level: critical
event_category: detections
event_data:
{"connection_id":1614226,"detection_time":1741994191,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":64142,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d1f9d0a2-6f11-4ee4-b2b6-c75293b701aa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994201,"event_type_id":6,"status":"blocked"}


event_id: 0b3c3f48-f2cd-4f6d-a9f1-72ed64aee82b
log_level: critical
event_category: detections
event_data:
{"connection_id":1614253,"detection_time":1741994201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":57942,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 202270de-df6c-4669-bae0-f56b29d09758
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994209,"event_type_id":6,"status":"blocked"}


event_id: fefa1dfd-ca8c-4abd-baa4-67d7abdcb3a5
log_level: critical
event_category: detections
event_data:
{"connection_id":1614272,"detection_time":1741994209,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":51849,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b2aaf60-22ab-4185-9a56-b7455fbd5818
log_level: critical
event_category: detections
event_data:
{"connection_id":1614291,"detection_time":1741994216,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":34553,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62b42b5b-c8c1-473c-9104-a74ac8d79260
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994218,"event_type_id":6,"status":"blocked"}


event_id: 62ffcba8-2b14-4ae1-9164-6d2605a45362
log_level: critical
event_category: detections
event_data:
{"connection_id":1614295,"detection_time":1741994218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":63511,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4e6d0c2e-d096-48b0-9b69-60a722296532
log_level: critical
event_category: detections
event_data:
{"connection_id":1614325,"detection_time":1741994223,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":18880,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7f2b20a-d62b-4d52-89a2-22f29d3510ce
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994228,"event_type_id":6,"status":"blocked"}


event_id: 14545412-517c-4b8b-8ebb-8e9a079d0dab
log_level: critical
event_category: detections
event_data:
{"connection_id":1614334,"detection_time":1741994228,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":57423,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74dd8acf-5170-4523-a9ce-2ea9b3baefe9
log_level: critical
event_category: detections
event_data:
{"connection_id":1614342,"detection_time":1741994229,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":5753,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 706ff2f7-5790-410f-9837-d3609da4d181
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994236,"event_type_id":6,"status":"blocked"}


event_id: 24d6e3e8-c9b3-4395-a471-27fb2c407e4e
log_level: critical
event_category: detections
event_data:
{"connection_id":1614357,"detection_time":1741994236,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":51422,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 021616d3-7918-451a-ad11-4b2e0b91c783
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994245,"event_type_id":6,"status":"blocked"}


event_id: 054a7f1b-989c-405a-a989-66d923c34591
log_level: critical
event_category: detections
event_data:
{"connection_id":1614373,"detection_time":1741994245,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":62656,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 68536683-567e-4782-85a0-d219656a6ed2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994254,"event_type_id":6,"status":"blocked"}


event_id: 15f95431-692d-4b56-abac-e164c454f1dd
log_level: critical
event_category: detections
event_data:
{"connection_id":1614398,"detection_time":1741994254,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":56558,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e1edf14b-1501-47fa-9d52-766153745029
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"103.168.241.8","autoblock_timeout":25,"detection_time":1741994262,"event_type_id":6,"status":"blocked"}


event_id: 7ff3a808-5a1a-477a-bb70-50de10fba89a
log_level: critical
event_category: detections
event_data:
{"connection_id":1614434,"detection_time":1741994262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"103.168.241.8","remote_port":50905,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d8f0f109-4cda-499f-84d1-181c5a195c59
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741994527,"event_type_id":6,"status":"blocked"}


event_id: 83d43c5c-6a3a-4e78-b2c8-874d57d7dac7
log_level: critical
event_category: detections
event_data:
{"connection_id":1615129,"detection_time":1741994527,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51496,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 43a024e2-0e08-47c4-aadd-8ce1e7e512a3
log_level: critical
event_category: detections
event_data:
{"connection_id":1615365,"detection_time":1741994618,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":30961,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b433655-7ae1-47ba-8d36-6744eb575782
log_level: critical
event_category: detections
event_data:
{"connection_id":1615380,"detection_time":1741994624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":36127,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5203689c-ae89-4210-a77f-8d2617d4a2e4
log_level: critical
event_category: detections
event_data:
{"connection_id":1615412,"detection_time":1741994631,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":39074,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9e4bcb24-d7aa-4489-bcd5-ede92684c188
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741994989,"event_type_id":6,"status":"blocked"}


event_id: 6940868f-99bb-4ed1-b05a-e20d1d34ed55
log_level: critical
event_category: detections
event_data:
{"connection_id":1616512,"detection_time":1741994989,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34430,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eec820a5-4eb2-4fe3-b3dc-c1ffec019508
log_level: critical
event_category: detections
event_data:
{"connection_id":1618071,"detection_time":1741995494,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":58785,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec5e2895-a0c3-4408-99bf-8195123e05d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741995497,"event_type_id":6,"status":"blocked"}


event_id: 617ebd4b-b22c-478a-aa4a-2a6c2e3e1345
log_level: critical
event_category: detections
event_data:
{"connection_id":1618080,"detection_time":1741995497,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43368,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 339d8231-8a0c-4d36-ba2e-d25379fa87ea
log_level: critical
event_category: detections
event_data:
{"connection_id":1618093,"detection_time":1741995500,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":47974,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 33fef9a7-e4a0-4a8e-9939-bb1a7290d9a7
log_level: critical
event_category: detections
event_data:
{"connection_id":1618110,"detection_time":1741995507,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":36486,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0289e33b-d4ed-49c8-a02b-0826697bd23c
log_level: critical
event_category: detections
event_data:
{"connection_id":1620869,"detection_time":1741996463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":54222,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec3dd4fa-1520-4b46-9409-2f4e3a6b67a2
log_level: critical
event_category: detections
event_data:
{"connection_id":1620881,"detection_time":1741996469,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":46367,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1bb445c5-d6ab-41d5-a1cd-2e1c3c15d395
log_level: critical
event_category: detections
event_data:
{"connection_id":1620911,"detection_time":1741996476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":36197,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 51c893b8-7ed9-4f90-b083-221050205d78
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741996496,"event_type_id":6,"status":"blocked"}


event_id: 2b7a6a76-71d5-4d70-852f-ca1f7a8cd9a1
log_level: critical
event_category: detections
event_data:
{"connection_id":1620956,"detection_time":1741996496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34384,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4991e583-f046-4e3b-a70b-7f07c06c750f
log_level: critical
event_category: detections
event_data:
{"connection_id":1621759,"detection_time":1741996790,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":53716,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc843093-b89d-4119-a51f-1920c6a5c171
log_level: critical
event_category: detections
event_data:
{"connection_id":1621778,"detection_time":1741996796,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":49567,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: af4db2dd-78e1-4162-a054-e4af4c30c97e
log_level: critical
event_category: detections
event_data:
{"connection_id":1621812,"detection_time":1741996803,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":43844,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e5d80f1d-d601-4efb-b83c-279decefa0df
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741996961,"event_type_id":6,"status":"blocked"}


event_id: 84115296-276d-48b1-95e4-4c8e04161894
log_level: critical
event_category: detections
event_data:
{"connection_id":1622321,"detection_time":1741996961,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44709,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0cc171be-aea4-49b6-aa37-e9476ab5e052
log_level: critical
event_category: detections
event_data:
{"connection_id":1622498,"detection_time":1741996999,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":30072,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a8d77b96-310f-471b-948c-4aa50a49a303
log_level: critical
event_category: detections
event_data:
{"connection_id":1622524,"detection_time":1741997005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":45793,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee152bbc-dd3a-4bad-9f63-7de559e8f391
log_level: critical
event_category: detections
event_data:
{"connection_id":1622542,"detection_time":1741997011,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":4272,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bac02b21-259a-4d17-aa3b-7bb533e5a44f
log_level: critical
event_category: detections
event_data:
{"connection_id":1623278,"detection_time":1741997258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":53035,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9d4a62a3-c00d-43c9-9904-59eaf3552adf
log_level: critical
event_category: detections
event_data:
{"connection_id":1623300,"detection_time":1741997265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":25608,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b729dd20-1ed3-4330-ad0c-58ce3e3b2260
log_level: critical
event_category: detections
event_data:
{"connection_id":1623337,"detection_time":1741997271,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":59101,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8753014-8bd5-4bad-8e1e-bae8a0785619
log_level: critical
event_category: detections
event_data:
{"connection_id":1623558,"detection_time":1741997348,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":33911,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 35a31965-3a7e-4423-a068-3eb9aa5af596
log_level: critical
event_category: detections
event_data:
{"connection_id":1623578,"detection_time":1741997355,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":45502,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0633945f-5b3d-476b-844c-f4b6a2d61276
log_level: critical
event_category: detections
event_data:
{"connection_id":1623598,"detection_time":1741997361,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":6517,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 94d5659a-700f-4f1d-98b3-1f42b632cdeb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741997439,"event_type_id":6,"status":"blocked"}


event_id: e54f0cbd-1a5d-48ad-9398-94cef0b731b8
log_level: critical
event_category: detections
event_data:
{"connection_id":1623815,"detection_time":1741997439,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43269,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca716695-fb85-408d-84d9-657f2090b8f0
log_level: critical
event_category: detections
event_data:
{"connection_id":1623923,"detection_time":1741997475,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":15761,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5b397dcf-742c-4ffb-b751-c338174454cc
log_level: critical
event_category: detections
event_data:
{"connection_id":1623937,"detection_time":1741997481,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":24176,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 516c9da1-d9d4-492a-a395-1a90798efc1b
log_level: critical
event_category: detections
event_data:
{"connection_id":1623954,"detection_time":1741997488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":32291,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8d6b87ae-6c2b-441b-8666-f89bcbd9c540
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741997498,"event_type_id":6,"status":"blocked"}


event_id: 4f198ab4-d866-46cc-9b5b-2123273e85ee
log_level: critical
event_category: detections
event_data:
{"connection_id":1623976,"detection_time":1741997498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52995,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 228d2274-b3e5-4e71-b3cc-7f5aab2d91eb
log_level: critical
event_category: detections
event_data:
{"connection_id":1626056,"detection_time":1741998200,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"23.94.186.206","remote_port":52113,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a6a50a6f-eb7f-46df-a3ed-70900353e38a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741998511,"event_type_id":6,"status":"blocked"}


event_id: 935ed1c4-4615-4135-8aae-cb0d77ad28bb
log_level: critical
event_category: detections
event_data:
{"connection_id":1627029,"detection_time":1741998511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44365,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 633d9b50-04dc-4c6e-b449-befb14ae3058
log_level: critical
event_category: detections
event_data:
{"connection_id":1627147,"detection_time":1741998557,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":11558,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 81434af6-f8e5-42c6-89a6-00d0171602ca
log_level: critical
event_category: detections
event_data:
{"connection_id":1627169,"detection_time":1741998563,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":23690,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a2357db9-1ced-4ebf-a93f-a12d4eaec26e
log_level: critical
event_category: detections
event_data:
{"connection_id":1627186,"detection_time":1741998570,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":39014,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 647ac0f6-014b-4c8b-a740-31b9b0803cf6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741998895,"event_type_id":6,"status":"blocked"}


event_id: 907be4a8-5e11-46b6-b02a-b93134fe5e8c
log_level: critical
event_category: detections
event_data:
{"connection_id":1628315,"detection_time":1741998895,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39089,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 75d3d050-3058-4b7b-877a-1ba20575446c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741999005,"event_type_id":6,"status":"blocked"}


event_id: 733a896c-d8cd-4079-82cc-4633c5210042
log_level: critical
event_category: detections
event_data:
{"connection_id":1628662,"detection_time":1741999005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52547,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8329f63-44ae-4006-bf37-533492e2596f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741999383,"event_type_id":6,"status":"blocked"}


event_id: 09515870-8461-4edd-981f-b5f3cc2b332e
log_level: critical
event_category: detections
event_data:
{"connection_id":1629831,"detection_time":1741999383,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37180,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3ba57f96-3b72-4bcc-9a99-dc0f6dee3c51
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1741999507,"event_type_id":6,"status":"blocked"}


event_id: 7e9f7af6-4fed-4a5b-800a-0c9b216f16d0
log_level: critical
event_category: detections
event_data:
{"connection_id":1630212,"detection_time":1741999508,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33772,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6db391e1-a0bb-4ecd-9bc2-f4fdb34c45ed
log_level: critical
event_category: detections
event_data:
{"connection_id":1630395,"detection_time":1741999566,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":3675,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e61c4005-6b0e-49c2-ac6f-d53151799ecb
log_level: critical
event_category: detections
event_data:
{"connection_id":1630416,"detection_time":1741999572,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":53960,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 41b7a34f-bfd1-4175-b439-3c7c80620465
log_level: critical
event_category: detections
event_data:
{"connection_id":1630450,"detection_time":1741999579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":42927,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6f8bcc3c-bb70-4188-b66d-22d32248fd60
log_level: critical
event_category: detections
event_data:
{"connection_id":1631217,"detection_time":1741999839,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":44263,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b5c38fdb-2851-409e-9335-ab3c5a65a312
log_level: critical
event_category: detections
event_data:
{"connection_id":1631229,"detection_time":1741999846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":48036,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1ea815c0-f8b2-4f03-b33d-06959caac421
log_level: critical
event_category: detections
event_data:
{"connection_id":1631263,"detection_time":1741999852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":47275,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 431c9782-9c85-4558-826e-e3d63c7a6371
log_level: critical
event_category: detections
event_data:
{"connection_id":1631765,"detection_time":1742000019,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":8496,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 35189f3e-d3c6-4334-b304-8fbb8f676b70
log_level: critical
event_category: detections
event_data:
{"connection_id":1631773,"detection_time":1742000025,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":22692,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b35c5c2b-4e11-4d6b-9afb-53fe583d6337
log_level: critical
event_category: detections
event_data:
{"connection_id":1631792,"detection_time":1742000032,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":36171,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 50e67ce8-54ae-41f0-ad30-a7cecb7a102d
log_level: critical
event_category: detections
event_data:
{"connection_id":1631871,"detection_time":1742000057,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":23647,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 66b71c5f-23fa-46ad-98dd-0a4b0a8d4eb7
log_level: critical
event_category: detections
event_data:
{"connection_id":1631890,"detection_time":1742000064,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":14486,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61641969-0532-4659-8ab0-ab11601f22ca
log_level: critical
event_category: detections
event_data:
{"connection_id":1631905,"detection_time":1742000070,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":1620,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eeb60ae1-70e3-4f29-80f2-471e54f59c23
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742000351,"event_type_id":6,"status":"blocked"}


event_id: 1d9543a9-a3be-4fc7-9378-7ce0db683e82
log_level: critical
event_category: detections
event_data:
{"connection_id":1632793,"detection_time":1742000351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34575,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 61c55482-98cd-4dbd-a9eb-fc1e5cdc339d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"43.240.64.75","autoblock_timeout":25,"detection_time":1742000715,"event_type_id":6,"status":"blocked"}


event_id: 78fee888-0833-403d-a432-a487278770c0
log_level: critical
event_category: detections
event_data:
{"connection_id":1634060,"detection_time":1742000715,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"43.240.64.75","remote_port":56900,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5414702e-2c43-45e4-bbbd-f6ab1ce4b2c7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742000836,"event_type_id":6,"status":"blocked"}


event_id: ba0ccd6e-3d25-4199-b7b6-267286a3413b
log_level: critical
event_category: detections
event_data:
{"connection_id":1634420,"detection_time":1742000836,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":32795,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b971d5a3-f20f-4365-a78f-2691701e6a0c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742001519,"event_type_id":6,"status":"blocked"}


event_id: 5f6a4f87-acfc-481c-a400-40b55b152a4e
log_level: critical
event_category: detections
event_data:
{"connection_id":1636579,"detection_time":1742001519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44289,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98b00045-cc80-4bb2-afd0-e3aa12aac764
log_level: critical
event_category: detections
event_data:
{"connection_id":1637424,"detection_time":1742001763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":37349,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dea16a39-3982-48c2-8be4-c81f2f8ca3aa
log_level: critical
event_category: detections
event_data:
{"connection_id":1637443,"detection_time":1742001769,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":51925,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fd66a7fc-9abc-4672-8614-4468ef747bce
log_level: critical
event_category: detections
event_data:
{"connection_id":1637465,"detection_time":1742001776,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":11832,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d04c8d1f-5466-41fc-840b-acc101859809
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742001806,"event_type_id":6,"status":"blocked"}


event_id: 2c8a6db8-caaf-499d-8940-0f0004594f30
log_level: critical
event_category: detections
event_data:
{"connection_id":1637577,"detection_time":1742001806,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57025,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 01b126fe-12a5-4319-a376-dda97bbf2f08
log_level: critical
event_category: detections
event_data:
{"connection_id":1638335,"detection_time":1742002017,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":7082,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7539b433-f04f-4e0b-ac69-18a2a5ecbc6f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742002022,"event_type_id":6,"status":"blocked"}


event_id: 65c8b674-e0fa-4f52-876e-0da529b103cf
log_level: critical
event_category: detections
event_data:
{"connection_id":1638365,"detection_time":1742002022,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54159,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8a4e06b-11ed-456d-8084-7da00cfb27f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1638380,"detection_time":1742002024,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":54497,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c406c84b-8705-466a-b17d-7a6eeae964e9
log_level: critical
event_category: detections
event_data:
{"connection_id":1638407,"detection_time":1742002030,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":41081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5eef25ef-844f-47a0-a8ff-06da7c1f61b0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742002290,"event_type_id":6,"status":"blocked"}


event_id: 85b24569-b4a1-4e38-a2d8-72f98704d88b
log_level: critical
event_category: detections
event_data:
{"connection_id":1639234,"detection_time":1742002290,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55704,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dedef4bc-bd83-45f7-b1ad-9bdc71b741b8
log_level: critical
event_category: detections
event_data:
{"connection_id":1639573,"detection_time":1742002376,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":17098,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3d6147b8-5fd9-42b5-8656-5bba8c5aede4
log_level: critical
event_category: detections
event_data:
{"connection_id":1639624,"detection_time":1742002383,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":55991,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 35ece1fa-0f51-4ebc-b8a9-741b36845c32
log_level: critical
event_category: detections
event_data:
{"connection_id":1639644,"detection_time":1742002389,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":35315,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 08077359-b763-4fc1-a94d-7b10aed21056
log_level: critical
event_category: detections
event_data:
{"connection_id":1640091,"detection_time":1742002519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":6129,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8e938c1d-5c0f-4df4-8342-104539c4a27b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742002526,"event_type_id":6,"status":"blocked"}


event_id: 9c7aeb6d-e3c9-4d9e-9144-e979d1ed9eb6
log_level: critical
event_category: detections
event_data:
{"connection_id":1640105,"detection_time":1742002526,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35005,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 39e3a853-f753-4fc2-84be-4334f4b5a296
log_level: critical
event_category: detections
event_data:
{"connection_id":1640108,"detection_time":1742002526,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":38760,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f64f3c7f-b7e1-486e-8bd9-bf3ef801d92a
log_level: critical
event_category: detections
event_data:
{"connection_id":1640132,"detection_time":1742002532,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":12621,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1dcb0413-aecc-4756-9750-054808cedde0
log_level: critical
event_category: detections
event_data:
{"connection_id":1640230,"detection_time":1742002565,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":15602,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be733e31-3f26-42f2-9b42-91f52c162cbf
log_level: critical
event_category: detections
event_data:
{"connection_id":1640244,"detection_time":1742002570,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":4056,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1f040d75-6d81-411f-a39d-7af1d017b486
log_level: critical
event_category: detections
event_data:
{"connection_id":1640248,"detection_time":1742002571,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":7848,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5b6cdb64-3b26-4cd0-9f0d-616c2815f636
log_level: critical
event_category: detections
event_data:
{"connection_id":1640281,"detection_time":1742002576,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":43430,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b784ede3-19e2-4559-8931-25a1894b69c6
log_level: critical
event_category: detections
event_data:
{"connection_id":1640285,"detection_time":1742002578,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":58543,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f057e438-a4f2-4702-974b-790e304c46f2
log_level: critical
event_category: detections
event_data:
{"connection_id":1640305,"detection_time":1742002582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":23635,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7ebfdd71-4bb7-4cdc-8294-ca836d0aa17c
log_level: critical
event_category: detections
event_data:
{"connection_id":1640534,"detection_time":1742002660,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":52186,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d0a5bf4a-b0b8-48b0-aebb-827f834df61d
log_level: critical
event_category: detections
event_data:
{"connection_id":1640551,"detection_time":1742002667,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":41137,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 07295143-d335-4efc-87da-1740e1811839
log_level: critical
event_category: detections
event_data:
{"connection_id":1640570,"detection_time":1742002673,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":30802,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 40a1f6ce-cc12-4ec9-ad0e-8d4ef582d616
log_level: critical
event_category: detections
event_data:
{"connection_id":1641134,"detection_time":1742002865,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":48763,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0515692c-a606-4d99-a8e5-0c612170c2da
log_level: critical
event_category: detections
event_data:
{"connection_id":1641151,"detection_time":1742002871,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":38640,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ba8b8284-d33e-41fc-bfb0-a4be800b6d15
log_level: critical
event_category: detections
event_data:
{"connection_id":1641164,"detection_time":1742002878,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":29320,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 917e05a3-8d0d-40cf-b300-13fe2a20d3c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742003030,"event_type_id":6,"status":"blocked"}


event_id: 96676594-fe89-4377-ab91-2aa37e36639b
log_level: critical
event_category: detections
event_data:
{"connection_id":1641599,"detection_time":1742003030,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44351,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ccdb1999-132b-47f9-b4e1-37edf06a14a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1641939,"detection_time":1742003131,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":32551,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 92cefb12-b3f1-41be-a3bf-52115fbc079e
log_level: critical
event_category: detections
event_data:
{"connection_id":1641968,"detection_time":1742003137,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":21781,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c655e038-989c-4076-a5d8-4afb84687b7d
log_level: critical
event_category: detections
event_data:
{"connection_id":1641984,"detection_time":1742003144,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":10904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2dd39e90-192e-45c6-8afc-659b2435cb74
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742003270,"event_type_id":6,"status":"blocked"}


event_id: 3111692a-a30f-49de-9233-69cee0f52e79
log_level: critical
event_category: detections
event_data:
{"connection_id":1642392,"detection_time":1742003270,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53630,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8dbb36ba-facf-4d0b-9c91-83794087f2ed
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742003532,"event_type_id":6,"status":"blocked"}


event_id: 3d8d6082-edb5-4c47-95e2-ed76565bc64a
log_level: critical
event_category: detections
event_data:
{"connection_id":1643261,"detection_time":1742003532,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53437,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4fe6bccf-be02-44d0-bce4-3fe23df206d6
log_level: critical
event_category: detections
event_data:
{"connection_id":1643822,"detection_time":1742003696,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":29919,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 984eaadb-130c-44da-833d-3f44c634fac1
log_level: critical
event_category: detections
event_data:
{"connection_id":1643843,"detection_time":1742003703,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":21452,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14c74df7-100c-41ee-ab38-1b1d8b2d58da
log_level: critical
event_category: detections
event_data:
{"connection_id":1643876,"detection_time":1742003709,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":12728,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02c79092-a361-4532-8082-8d2b8c2ef765
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742003750,"event_type_id":6,"status":"blocked"}


event_id: b16b2815-8771-4f28-90f6-04a532d47b38
log_level: critical
event_category: detections
event_data:
{"connection_id":1644011,"detection_time":1742003750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52630,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5393a5b3-9870-4925-b619-4c87ef696892
log_level: critical
event_category: detections
event_data:
{"connection_id":1644609,"detection_time":1742003933,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":57970,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 84ca723c-cdc5-4e94-8ff5-712ccf69af1a
log_level: critical
event_category: detections
event_data:
{"connection_id":1644632,"detection_time":1742003940,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":45754,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 966bc227-d448-4fa9-bf5b-5146f0d48b11
log_level: critical
event_category: detections
event_data:
{"connection_id":1644675,"detection_time":1742003946,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":32715,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0eb0e001-7222-4ddb-b6c1-60a0e4c6f851
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742004031,"event_type_id":6,"status":"blocked"}


event_id: 43fecccd-bb17-4f46-816e-dc46cb7d0fa2
log_level: critical
event_category: detections
event_data:
{"connection_id":1644945,"detection_time":1742004031,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33946,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5b791846-b4b4-4541-9fbd-f39d3432512c
log_level: critical
event_category: detections
event_data:
{"connection_id":1645470,"detection_time":1742004166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":14609,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1461581c-81b0-46bf-8cb9-071ce551a9ea
log_level: critical
event_category: detections
event_data:
{"connection_id":1645489,"detection_time":1742004173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":7309,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c2b0677d-40ef-4ba0-8b15-5ada26d8b106
log_level: critical
event_category: detections
event_data:
{"connection_id":1645541,"detection_time":1742004179,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":58278,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 05bfecbe-56a4-4db1-97f8-6d322310e687
log_level: critical
event_category: detections
event_data:
{"connection_id":1645705,"detection_time":1742004218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":34935,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2028b29-0eea-4a41-b80f-9631f978862e
log_level: critical
event_category: detections
event_data:
{"connection_id":1645732,"detection_time":1742004225,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":25760,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 74ff8402-fe9b-4edc-b462-714b396a157a
log_level: critical
event_category: detections
event_data:
{"connection_id":1645758,"detection_time":1742004231,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":17835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 54498363-9623-4353-8659-fcf624f4ce0c
log_level: critical
event_category: detections
event_data:
{"connection_id":1646186,"detection_time":1742004350,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":35324,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 93e0d15e-71c0-4409-b443-827aa00519d5
log_level: critical
event_category: detections
event_data:
{"connection_id":1646212,"detection_time":1742004357,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":26499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b8af4f3c-54ed-420f-91ef-325b9780b361
log_level: critical
event_category: detections
event_data:
{"connection_id":1646238,"detection_time":1742004363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":17616,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 132b1e0f-763d-4a8d-b0bc-c07c125e9461
log_level: critical
event_category: detections
event_data:
{"connection_id":1647990,"detection_time":1742004884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":14587,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 530f91d0-17c8-4003-a560-b15d77af28f2
log_level: critical
event_category: detections
event_data:
{"connection_id":1648001,"detection_time":1742004891,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":3546,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 907c4c4f-12af-4cab-a90c-f3571d873286
log_level: critical
event_category: detections
event_data:
{"connection_id":1648034,"detection_time":1742004897,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":51590,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8866e646-a73f-44b3-b2fb-6be0ec5520fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742005035,"event_type_id":6,"status":"blocked"}


event_id: 0be10457-fe25-4f63-855f-1691ffd69197
log_level: critical
event_category: detections
event_data:
{"connection_id":1648494,"detection_time":1742005035,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50999,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0f9e8f1a-37ed-46a6-93db-1c68ff7edc01
log_level: critical
event_category: detections
event_data:
{"connection_id":1648892,"detection_time":1742005160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":14964,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e86c72bc-cb9f-4467-b385-d1310a2cb5c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1648911,"detection_time":1742005166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":1964,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 68268f82-b2a2-4e95-b0e9-a9b35120b884
log_level: critical
event_category: detections
event_data:
{"connection_id":1648939,"detection_time":1742005172,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":8576,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5adc8b79-04c2-4593-b578-adea4190896c
log_level: critical
event_category: detections
event_data:
{"connection_id":1648945,"detection_time":1742005173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":46316,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5a47074c-b38f-4dbb-9920-03d6663feee8
log_level: critical
event_category: detections
event_data:
{"connection_id":1648961,"detection_time":1742005179,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":54070,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86330bce-e8ab-4e46-ae23-0f400a4650ce
log_level: critical
event_category: detections
event_data:
{"connection_id":1648977,"detection_time":1742005185,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":40958,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8838ff6-cefe-4d03-aea5-7f79eb7eb234
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742005213,"event_type_id":6,"status":"blocked"}


event_id: dad0d1a2-cbb6-4b3a-a0ea-5d36e353c8d8
log_level: critical
event_category: detections
event_data:
{"connection_id":1649067,"detection_time":1742005213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50080,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87894653-17da-454c-9dc5-270723d77e6a
log_level: critical
event_category: detections
event_data:
{"connection_id":1649217,"detection_time":1742005265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":41356,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c2ef7a9-94d1-4abc-9c5a-75a94d86aaac
log_level: critical
event_category: detections
event_data:
{"connection_id":1649231,"detection_time":1742005271,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":33009,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4fa1fd26-3e54-4068-a8e6-a133608ffd6a
log_level: critical
event_category: detections
event_data:
{"connection_id":1649246,"detection_time":1742005277,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":22627,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c5cfbff1-ed4d-4d5e-80ed-ae65161b584f
log_level: critical
event_category: detections
event_data:
{"connection_id":1649594,"detection_time":1742005388,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":40255,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 829a9be7-b9b1-4a3c-bcf6-ca943084e7f4
log_level: critical
event_category: detections
event_data:
{"connection_id":1649605,"detection_time":1742005395,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":30032,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8a0fb5f6-8fd2-447e-98d5-7724ce3ccfb1
log_level: critical
event_category: detections
event_data:
{"connection_id":1649621,"detection_time":1742005401,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":18537,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8f67d921-8f21-4de6-972b-439280cf3ee7
log_level: critical
event_category: detections
event_data:
{"connection_id":1649946,"detection_time":1742005499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":33162,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6bea69d2-3cf3-41e0-8203-6fde4598b655
log_level: critical
event_category: detections
event_data:
{"connection_id":1649967,"detection_time":1742005505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":24749,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8147c1bc-f281-44f6-9b3b-8f52c9c88dcc
log_level: critical
event_category: detections
event_data:
{"connection_id":1649983,"detection_time":1742005511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":15810,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 617d1506-5e97-4283-ae46-ffe558b805fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742005704,"event_type_id":6,"status":"blocked"}


event_id: 91f3a334-a7ac-4574-b874-bb8e9fdc70c5
log_level: critical
event_category: detections
event_data:
{"connection_id":1650637,"detection_time":1742005704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48911,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 12348477-db8e-431d-aa4f-d3db954698fa
log_level: critical
event_category: detections
event_data:
{"connection_id":1651904,"detection_time":1742006031,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":50445,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac1f4351-db09-4ca6-85b1-6437e9e615cf
log_level: critical
event_category: detections
event_data:
{"connection_id":1651922,"detection_time":1742006037,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":41523,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0be38f97-e608-4fa0-b4c3-81d9c729b0a0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006040,"event_type_id":6,"status":"blocked"}


event_id: c0d6dffd-b2e8-48c9-a899-958113a4a758
log_level: critical
event_category: detections
event_data:
{"connection_id":1651929,"detection_time":1742006040,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40817,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bdee7374-51d1-4a0b-812d-f16a124f842c
log_level: critical
event_category: detections
event_data:
{"connection_id":1651949,"detection_time":1742006044,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":30864,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 00389092-0265-40c0-a9ad-12d856ff3101
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006183,"event_type_id":6,"status":"blocked"}


event_id: 2744a8c2-819e-4752-82b1-7c7e989df471
log_level: critical
event_category: detections
event_data:
{"connection_id":1652376,"detection_time":1742006183,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":47750,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 038bdff2-a142-4190-a71c-a3ed240daf6c
log_level: critical
event_category: detections
event_data:
{"connection_id":1652794,"detection_time":1742006322,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":12499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7171158c-74dc-4e7c-92e6-28a05b705478
log_level: critical
event_category: detections
event_data:
{"connection_id":1652815,"detection_time":1742006329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":3389,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60f74ede-3fad-495c-9c64-b054885ec013
log_level: critical
event_category: detections
event_data:
{"connection_id":1652834,"detection_time":1742006335,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":53711,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 18a62768-5c85-433b-9e4b-42de1633598f
log_level: critical
event_category: detections
event_data:
{"connection_id":1653196,"detection_time":1742006458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":3853,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: da22aad7-f646-4906-bf66-e64f3f1482a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1653242,"detection_time":1742006464,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":54442,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee8fac65-7364-4b00-8ea4-102c31d79884
log_level: critical
event_category: detections
event_data:
{"connection_id":1653259,"detection_time":1742006471,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":46335,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5dff5e2e-290e-435b-ab16-f8f66c65361a
log_level: critical
event_category: detections
event_data:
{"connection_id":1653320,"detection_time":1742006496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":59366,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cc435bd8-c2a8-437a-9c08-2663fab98650
log_level: critical
event_category: detections
event_data:
{"connection_id":1653344,"detection_time":1742006499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":35339,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 35ad59b6-b639-47e4-b7ee-f5143d1afbe0
log_level: critical
event_category: detections
event_data:
{"connection_id":1653359,"detection_time":1742006503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":50423,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e6f7351c-0c43-4b85-9f45-d3cc5db09244
log_level: critical
event_category: detections
event_data:
{"connection_id":1653369,"detection_time":1742006505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":24276,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3813adb9-89b6-4c5c-b070-40923e9320b6
log_level: critical
event_category: detections
event_data:
{"connection_id":1653380,"detection_time":1742006509,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":41888,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eb07837f-4cae-4158-ace8-139973189a72
log_level: critical
event_category: detections
event_data:
{"connection_id":1653392,"detection_time":1742006512,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":13840,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6df4d43e-edab-4514-b75d-c9cb7c3f6f68
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006541,"event_type_id":6,"status":"blocked"}


event_id: c4f57ac8-dc72-4ee4-8b80-45ba13afa481
log_level: critical
event_category: detections
event_data:
{"connection_id":1653499,"detection_time":1742006541,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49599,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a0e0681-2ee7-4696-8f12-fe212d5ed571
log_level: critical
event_category: detections
event_data:
{"connection_id":1653541,"detection_time":1742006554,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":6738,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 04d6a099-96e7-4f3c-8b21-c81637a8c5a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1653556,"detection_time":1742006560,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":57033,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dfed13c8-4b74-4aa8-a6fe-6ed39ab92a73
log_level: critical
event_category: detections
event_data:
{"connection_id":1653567,"detection_time":1742006567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":48653,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6795a674-8682-4e27-b2ad-f97a9edfa542
log_level: critical
event_category: detections
event_data:
{"connection_id":1653826,"detection_time":1742006650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":33609,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9de01473-809c-474e-811e-b79cfe0cb2fc
log_level: critical
event_category: detections
event_data:
{"connection_id":1653863,"detection_time":1742006656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":25423,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c1edb799-7259-4591-b587-31bf8b0cd216
log_level: critical
event_category: detections
event_data:
{"connection_id":1653884,"detection_time":1742006663,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":16400,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f31adddc-6e80-4721-a802-72c0c63d3970
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742006672,"event_type_id":6,"status":"blocked"}


event_id: 779d99ca-2309-4505-a8cf-ed62c5e9c256
log_level: critical
event_category: detections
event_data:
{"connection_id":1653914,"detection_time":1742006672,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46671,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8e7eb107-dd20-4673-b839-2debe0bbad2b
log_level: critical
event_category: detections
event_data:
{"connection_id":1654489,"detection_time":1742006845,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":37478,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 92aea5e5-3e55-4785-844c-83efa5c300d5
log_level: critical
event_category: detections
event_data:
{"connection_id":1654523,"detection_time":1742006852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":26212,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 05bda64b-6134-4508-82b1-bbe5fdaed4ea
log_level: critical
event_category: detections
event_data:
{"connection_id":1654542,"detection_time":1742006858,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":15427,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: df5ba1ec-c33b-46b8-9720-3a667c40ab3c
log_level: critical
event_category: detections
event_data:
{"connection_id":1655083,"detection_time":1742007036,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":59913,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: de71c192-f118-4f97-92c3-f5ba517056e9
log_level: critical
event_category: detections
event_data:
{"connection_id":1655115,"detection_time":1742007043,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":50545,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a7be0bce-38ba-4aa7-b69e-c0c74a66e23e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742007047,"event_type_id":6,"status":"blocked"}


event_id: 5a3298d1-051f-453f-8a2f-3fcba46753c5
log_level: critical
event_category: detections
event_data:
{"connection_id":1655142,"detection_time":1742007047,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58704,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66d3b978-ad09-4490-ae9b-7dd051a76ae5
log_level: critical
event_category: detections
event_data:
{"connection_id":1655153,"detection_time":1742007049,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":43370,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7d1fd957-2fa8-4714-90d7-480aab9610ae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742007156,"event_type_id":6,"status":"blocked"}


event_id: d560af0b-1922-449c-9591-6820fc56f6f9
log_level: critical
event_category: detections
event_data:
{"connection_id":1655471,"detection_time":1742007156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45702,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f040371d-5a8e-4023-8b05-ade7b27b4108
log_level: critical
event_category: detections
event_data:
{"connection_id":1656881,"detection_time":1742007603,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":21183,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ec671a6-d1c6-4ad0-bf49-af87258a91ad
log_level: critical
event_category: detections
event_data:
{"connection_id":1656912,"detection_time":1742007609,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":13773,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 849bc811-cefc-483f-8118-1e2527d8b403
log_level: critical
event_category: detections
event_data:
{"connection_id":1656933,"detection_time":1742007616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":7951,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2df95fad-7df1-489e-85be-13900c882aaa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742007650,"event_type_id":6,"status":"blocked"}


event_id: 83e79f1d-1971-46a1-acfa-ee4ae0ea7db0
log_level: critical
event_category: detections
event_data:
{"connection_id":1657051,"detection_time":1742007650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44698,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 86434eb8-cf9e-4c82-ae81-5435915007c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1657734,"detection_time":1742007827,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":43559,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a0a7569f-64b7-48ff-adf2-cddd17fad628
log_level: critical
event_category: detections
event_data:
{"connection_id":1657765,"detection_time":1742007833,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":34774,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b5734631-432e-46bd-990c-a11a0698cab6
log_level: critical
event_category: detections
event_data:
{"connection_id":1657798,"detection_time":1742007840,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":25416,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 597dce4e-40dd-4627-a06e-83337c7a3508
log_level: critical
event_category: detections
event_data:
{"connection_id":1658327,"detection_time":1742007998,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":33199,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62fba0d7-7021-4172-a310-992013366743
log_level: critical
event_category: detections
event_data:
{"connection_id":1658345,"detection_time":1742008005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":20087,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0bcc9fee-ddfb-4d38-8e8d-5c9947e86fc4
log_level: critical
event_category: detections
event_data:
{"connection_id":1658361,"detection_time":1742008011,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":6801,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aa43908b-92a5-4733-8025-302cbcc1b5b1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742008057,"event_type_id":6,"status":"blocked"}


event_id: 2497029e-8297-4348-a122-ed8da0d6b3e8
log_level: critical
event_category: detections
event_data:
{"connection_id":1658498,"detection_time":1742008057,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48686,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dfae54b3-f426-44ff-b1bd-6c1df1ff60f0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742008132,"event_type_id":6,"status":"blocked"}


event_id: 6308e6b5-b7c4-4330-abdc-95764bc9f287
log_level: critical
event_category: detections
event_data:
{"connection_id":1658749,"detection_time":1742008132,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43494,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: acf410df-f4b1-4b6c-b7b3-da148123f566
log_level: critical
event_category: detections
event_data:
{"connection_id":1658980,"detection_time":1742008201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":18353,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b0045a7-b283-4f18-9dc1-1b95d30d3b0e
log_level: critical
event_category: detections
event_data:
{"connection_id":1659004,"detection_time":1742008208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":10277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d7ab7aa1-e9a6-4232-b84f-b9e19b07cecc
log_level: critical
event_category: detections
event_data:
{"connection_id":1659029,"detection_time":1742008214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":1510,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 495e8b55-fbc6-4d80-b97f-bbc4d1f60909
log_level: critical
event_category: detections
event_data:
{"connection_id":1659164,"detection_time":1742008256,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":6042,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fa61ae81-5d66-436e-82f0-983896af1144
log_level: critical
event_category: detections
event_data:
{"connection_id":1659178,"detection_time":1742008262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":52305,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 294fd01c-8603-49b7-9da1-e43dd9e60e59
log_level: critical
event_category: detections
event_data:
{"connection_id":1659205,"detection_time":1742008268,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":38736,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: da757b30-cc6b-45d7-864e-2ea34ee2676a
log_level: critical
event_category: detections
event_data:
{"connection_id":1659593,"detection_time":1742008391,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":27776,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0590346f-7b15-4ae5-9c05-4d19af11223f
log_level: critical
event_category: detections
event_data:
{"connection_id":1659613,"detection_time":1742008398,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":14595,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b128018-0d4d-4e93-9502-4ad1f11513fb
log_level: critical
event_category: detections
event_data:
{"connection_id":1659626,"detection_time":1742008404,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":1508,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5df10da-6799-4078-a282-a88c8f486db5
log_level: critical
event_category: detections
event_data:
{"connection_id":1660361,"detection_time":1742008623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":40529,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 984bca45-6929-4e8e-8ac7-6dcbfe71b371
log_level: critical
event_category: detections
event_data:
{"connection_id":1660381,"detection_time":1742008630,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":32305,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0d33cae1-d089-462f-896f-9af39ad4457b
log_level: critical
event_category: detections
event_data:
{"connection_id":1660396,"detection_time":1742008636,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":23673,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c7e1935-fbe3-41de-a1b8-82d557a6d554
log_level: critical
event_category: detections
event_data:
{"connection_id":1660620,"detection_time":1742008709,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":7870,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d7fb3d7e-1328-4911-8ed2-f7f5d0931449
log_level: critical
event_category: detections
event_data:
{"connection_id":1660635,"detection_time":1742008716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":56437,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 26601084-52af-43de-8fad-01a9ee34e38d
log_level: critical
event_category: detections
event_data:
{"connection_id":1660670,"detection_time":1742008722,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":43774,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b580731-285c-4403-b348-a44e7238931e
log_level: critical
event_category: detections
event_data:
{"connection_id":1660863,"detection_time":1742008779,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":39961,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 72d66b19-72de-4535-8abf-c2d2b7663796
log_level: critical
event_category: detections
event_data:
{"connection_id":1660885,"detection_time":1742008785,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":31069,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 26e76cf1-9555-46eb-8b5e-0b9abd177b22
log_level: critical
event_category: detections
event_data:
{"connection_id":1660894,"detection_time":1742008790,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":43110,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb843c0a-a219-4087-b243-7eebdadcbb75
log_level: critical
event_category: detections
event_data:
{"connection_id":1660900,"detection_time":1742008792,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":22799,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1eed8ee8-50c5-4138-9fdb-2ddb6f589364
log_level: critical
event_category: detections
event_data:
{"connection_id":1660912,"detection_time":1742008796,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":35767,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f042cc53-2d2c-45ca-97ca-89f79367b826
log_level: critical
event_category: detections
event_data:
{"connection_id":1660946,"detection_time":1742008802,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":28281,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ae06501-4bd2-442e-9db4-c01feaa2df87
log_level: critical
event_category: detections
event_data:
{"connection_id":1661365,"detection_time":1742008922,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":41229,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3483df8a-ad99-4604-8df5-68424c4120b8
log_level: critical
event_category: detections
event_data:
{"connection_id":1661388,"detection_time":1742008928,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":32807,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c7ca39de-e410-4a3f-a480-a31281f61ea5
log_level: critical
event_category: detections
event_data:
{"connection_id":1661406,"detection_time":1742008935,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":19089,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 69beab81-47c5-4e0e-963e-91d0d01fcde7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742009102,"event_type_id":6,"status":"blocked"}


event_id: 8bc8f027-1482-43de-aadb-3de83d5d4698
log_level: critical
event_category: detections
event_data:
{"connection_id":1661975,"detection_time":1742009102,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41295,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e09f44c1-13cc-4d88-9d84-1c84bec69f9b
log_level: critical
event_category: detections
event_data:
{"connection_id":1662142,"detection_time":1742009154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":57796,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5786cc2-c492-40fa-9035-42418a40587e
log_level: critical
event_category: detections
event_data:
{"connection_id":1662162,"detection_time":1742009160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":47361,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5027b42e-4c67-4c76-9797-4e62e87cfdb5
log_level: critical
event_category: detections
event_data:
{"connection_id":1662203,"detection_time":1742009166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":38579,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f651900-6fd2-41c0-89d1-f42edadddf26
log_level: critical
event_category: detections
event_data:
{"connection_id":1662393,"detection_time":1742009218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":45733,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61362d71-b8a1-4fdc-8462-4fa6aebcf44e
log_level: critical
event_category: detections
event_data:
{"connection_id":1662424,"detection_time":1742009224,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":36387,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ef827877-7535-4ea5-9c1e-52c8de528066
log_level: critical
event_category: detections
event_data:
{"connection_id":1662447,"detection_time":1742009230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":28549,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc4d78c4-ba4b-42a4-b028-11db55616e42
log_level: critical
event_category: detections
event_data:
{"connection_id":1662560,"detection_time":1742009265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":56618,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1956a082-d7fc-4ee3-908b-26b771624018
log_level: critical
event_category: detections
event_data:
{"connection_id":1662579,"detection_time":1742009271,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":47809,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a4686fe8-6ac9-4d55-bb54-efb3f463c73b
log_level: critical
event_category: detections
event_data:
{"connection_id":1662600,"detection_time":1742009278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":38578,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d2c18b7a-0c85-4578-b2ce-ecead4d7b60f
log_level: critical
event_category: detections
event_data:
{"connection_id":1662866,"detection_time":1742009351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":40552,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 17d72fc1-439f-411a-a5a0-acd09d6389b2
log_level: critical
event_category: detections
event_data:
{"connection_id":1662887,"detection_time":1742009358,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":27317,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7d4f5c0b-6dab-4873-9a26-1dbcbe5837ad
log_level: critical
event_category: detections
event_data:
{"connection_id":1662909,"detection_time":1742009364,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":13562,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cfbcd6b5-f6c5-485a-80ad-e6130a418dcb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742009590,"event_type_id":6,"status":"blocked"}


event_id: 15777b55-7cc2-43fc-ad16-315a5078ec92
log_level: critical
event_category: detections
event_data:
{"connection_id":1663732,"detection_time":1742009590,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40938,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1c851b40-54e0-426e-9c38-fc3d37e8a03c
log_level: critical
event_category: detections
event_data:
{"connection_id":1663839,"detection_time":1742009615,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":19490,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 316a56f8-ae58-4784-af82-20bd3d4554c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1663871,"detection_time":1742009622,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":51766,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 22dbc8cc-b797-4c44-8e44-54798fea82a2
log_level: critical
event_category: detections
event_data:
{"connection_id":1663890,"detection_time":1742009628,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":23840,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cd14fdf5-61ce-4f4f-b5df-d5c2ada0fe80
log_level: critical
event_category: detections
event_data:
{"connection_id":1664031,"detection_time":1742009661,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":59814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5a88407f-490d-4109-9d11-46d1ce79edc0
log_level: critical
event_category: detections
event_data:
{"connection_id":1664043,"detection_time":1742009667,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":51444,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 519c5239-bc87-46a4-8c1c-022209d74656
log_level: critical
event_category: detections
event_data:
{"connection_id":1664064,"detection_time":1742009674,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":43115,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: af57fe56-e3a3-4c12-ac12-48e35e4a5d98
log_level: critical
event_category: detections
event_data:
{"connection_id":1664492,"detection_time":1742009800,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":23511,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c9c1f873-8755-4237-9f39-660141b41066
log_level: critical
event_category: detections
event_data:
{"connection_id":1664529,"detection_time":1742009807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":15752,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d6a78a2b-3d8b-4e79-9310-6b7347e92dc0
log_level: critical
event_category: detections
event_data:
{"connection_id":1664543,"detection_time":1742009813,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":6626,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bd086bf3-6a49-4076-9a8d-e0928181a81d
log_level: critical
event_category: detections
event_data:
{"connection_id":1665030,"detection_time":1742009954,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":30803,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7d6334b8-d9c8-4750-abec-920b568d271f
log_level: critical
event_category: detections
event_data:
{"connection_id":1665064,"detection_time":1742009960,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":18015,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aefc8617-22fa-450c-96d2-aa8adf266d28
log_level: critical
event_category: detections
event_data:
{"connection_id":1665090,"detection_time":1742009966,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":8250,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b711603c-f4a2-4af7-b7d0-39a67bc66413
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742010084,"event_type_id":6,"status":"blocked"}


event_id: 9cd7f252-ad33-4b98-9dfb-b1cb12512d5b
log_level: critical
event_category: detections
event_data:
{"connection_id":1665535,"detection_time":1742010084,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40117,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ed234d6-b647-47e2-90a3-627e5103e03d
log_level: critical
event_category: detections
event_data:
{"connection_id":1665861,"detection_time":1742010170,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":1805,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 45ea6c2b-94b9-4988-ad06-f7f8492fc2b1
log_level: critical
event_category: detections
event_data:
{"connection_id":1665892,"detection_time":1742010176,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":51768,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 96b3da62-ec1a-4293-b6d2-8569003f51da
log_level: critical
event_category: detections
event_data:
{"connection_id":1665912,"detection_time":1742010183,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":42499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dfc95377-510f-4ce6-857b-fddc8f41ff5e
log_level: critical
event_category: detections
event_data:
{"connection_id":1666442,"detection_time":1742010331,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":1667,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d413fdb3-aa9c-4e73-8904-f3c51bc48d70
log_level: critical
event_category: detections
event_data:
{"connection_id":1666466,"detection_time":1742010337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":48066,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 130f8cb3-fafa-4d2b-9659-66bec8109323
log_level: critical
event_category: detections
event_data:
{"connection_id":1666482,"detection_time":1742010341,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":6864,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb290c90-ac66-4995-8c4c-9114a9c9b37b
log_level: critical
event_category: detections
event_data:
{"connection_id":1666490,"detection_time":1742010344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":34501,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e03a3f61-99dc-4ef8-80f4-3d17f9bb568e
log_level: critical
event_category: detections
event_data:
{"connection_id":1666499,"detection_time":1742010347,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":58049,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cbf549b8-e53a-489c-b6c6-0434a3bf7303
log_level: critical
event_category: detections
event_data:
{"connection_id":1666518,"detection_time":1742010354,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":49098,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 399ae943-f8cf-4007-98e2-1400b6d95a37
log_level: critical
event_category: detections
event_data:
{"connection_id":1667158,"detection_time":1742010523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":51750,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: febf3023-907d-47f2-af69-f27c70acbe09
log_level: critical
event_category: detections
event_data:
{"connection_id":1667181,"detection_time":1742010529,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":43842,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f77a56b2-3cad-4ef2-9473-4845e7663bb7
log_level: critical
event_category: detections
event_data:
{"connection_id":1667202,"detection_time":1742010536,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":35274,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 104df3e1-53a4-4086-bf75-bdec3b7089e9
log_level: critical
event_category: detections
event_data:
{"connection_id":1667389,"detection_time":1742010587,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":35494,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6e3e66c3-967e-44af-9a5c-9e267c3a26b6
log_level: critical
event_category: detections
event_data:
{"connection_id":1667428,"detection_time":1742010593,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":27328,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d4d706a4-85b7-4cf1-9c06-2dd66750f813
log_level: critical
event_category: detections
event_data:
{"connection_id":1667453,"detection_time":1742010600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":19093,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c7894810-a442-4058-bb26-2414e7f2db44
log_level: critical
event_category: detections
event_data:
{"connection_id":1667724,"detection_time":1742010675,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":19814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 364b7fce-9cfa-4b89-9320-b9c9b2cfa21c
log_level: critical
event_category: detections
event_data:
{"connection_id":1667742,"detection_time":1742010681,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":11788,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 46ed0c61-b0f1-40ea-9f7c-848fbcfc1224
log_level: critical
event_category: detections
event_data:
{"connection_id":1667765,"detection_time":1742010687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":3552,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ae0693c8-c6f8-4047-8219-42aed49627b2
log_level: critical
event_category: detections
event_data:
{"connection_id":1668029,"detection_time":1742010763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":35901,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3361be78-c4c5-41ae-a03b-6fecfc390daa
log_level: critical
event_category: detections
event_data:
{"connection_id":1668054,"detection_time":1742010769,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":22904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: df359ce0-a84e-4e0d-9ab6-f043ffb3b77d
log_level: critical
event_category: detections
event_data:
{"connection_id":1668068,"detection_time":1742010776,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":9459,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a67e4b78-3e77-4769-91f3-431376e17452
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742011057,"event_type_id":6,"status":"blocked"}


event_id: ad4cd0ef-eb92-4271-b79b-06b5cec5c631
log_level: critical
event_category: detections
event_data:
{"connection_id":1669035,"detection_time":1742011058,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37162,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98fd7c1f-0e7c-4ec6-a518-d8ea13bba378
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742011064,"event_type_id":6,"status":"blocked"}


event_id: 2c8ad4fd-24c9-4cc9-a9fa-99028de39d36
log_level: critical
event_category: detections
event_data:
{"connection_id":1669071,"detection_time":1742011064,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45606,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 908b1243-ccd6-45e4-b730-f49e368a9c08
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742011535,"event_type_id":6,"status":"blocked"}


event_id: 745473e0-e257-4086-b63f-2cf6f6e7a0d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1670792,"detection_time":1742011535,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c1b436b8-bcb6-4e0d-9035-d1479956623b
log_level: critical
event_category: detections
event_data:
{"connection_id":1670997,"detection_time":1742011595,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":23399,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f5583326-1ff6-49c8-87c1-d6cc35f98e89
log_level: critical
event_category: detections
event_data:
{"connection_id":1671011,"detection_time":1742011602,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":15276,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cfd7e340-c4fb-4d83-bbfb-332b0d1e7a14
log_level: critical
event_category: detections
event_data:
{"connection_id":1671047,"detection_time":1742011608,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":6642,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 93b20269-f227-404e-8a8a-cdcbae1b0953
log_level: critical
event_category: detections
event_data:
{"connection_id":1671557,"detection_time":1742011766,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":39000,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 507b7eeb-8cdd-4a81-a18a-a87d1b6f4d8a
log_level: critical
event_category: detections
event_data:
{"connection_id":1671581,"detection_time":1742011772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":26395,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8ad5d36e-644f-4687-bbd0-9575eaee998f
log_level: critical
event_category: detections
event_data:
{"connection_id":1671603,"detection_time":1742011779,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":16208,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5abed4d7-6d7b-43ed-909b-0ad3183f7598
log_level: critical
event_category: detections
event_data:
{"connection_id":1671705,"detection_time":1742011807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":2034,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d07af4d2-7081-4e3a-88fd-8bd329de3bd2
log_level: critical
event_category: detections
event_data:
{"connection_id":1671718,"detection_time":1742011813,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":45333,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ca9e5870-32c5-4ecd-bb08-f980480398ce
log_level: critical
event_category: detections
event_data:
{"connection_id":1671757,"detection_time":1742011820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":31350,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e3d4847b-8786-4fa2-b89c-802d361e6557
log_level: critical
event_category: detections
event_data:
{"connection_id":1672395,"detection_time":1742012009,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":19195,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1ca39ec4-5f12-4367-8c6d-55b1f934a478
log_level: critical
event_category: detections
event_data:
{"connection_id":1672429,"detection_time":1742012015,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":38597,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 293962aa-99ef-4570-becf-38d9f2fa407e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012021,"event_type_id":6,"status":"blocked"}


event_id: 8ede84ef-c66f-4cc4-a34e-e07ca6dce551
log_level: critical
event_category: detections
event_data:
{"connection_id":1672445,"detection_time":1742012021,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33889,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bddc53a8-fce5-4700-8406-946f98574ba3
log_level: critical
event_category: detections
event_data:
{"connection_id":1672449,"detection_time":1742012021,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":2764,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e31632ea-677c-42cc-828e-4d384fbbe010
log_level: critical
event_category: detections
event_data:
{"connection_id":1672510,"detection_time":1742012042,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":26054,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61f5400b-a316-4797-954c-298266351ad6
log_level: critical
event_category: detections
event_data:
{"connection_id":1672544,"detection_time":1742012048,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":45928,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6be55c9c-feb1-49cc-8c82-a8d996da4903
log_level: critical
event_category: detections
event_data:
{"connection_id":1672551,"detection_time":1742012051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":12715,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: af6a57f1-db3b-4b90-87c4-c37aabfe8e1b
log_level: critical
event_category: detections
event_data:
{"connection_id":1672581,"detection_time":1742012054,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":2124,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ba35cacf-9780-44e4-83e5-17a54e8ed7d2
log_level: critical
event_category: detections
event_data:
{"connection_id":1672599,"detection_time":1742012061,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":22816,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b7f030a-457d-40f4-a0f7-22c76dd3ddcd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012070,"event_type_id":6,"status":"blocked"}


event_id: bda6fc06-1775-4c67-8470-d6f81993ddc8
log_level: critical
event_category: detections
event_data:
{"connection_id":1672627,"detection_time":1742012070,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36807,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 99283490-2f4a-431b-ae24-d4a2beb86835
log_level: critical
event_category: detections
event_data:
{"connection_id":1672766,"detection_time":1742012108,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":12887,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 874703d2-59e4-4416-ab0e-dc1d47ee6df0
log_level: critical
event_category: detections
event_data:
{"connection_id":1672788,"detection_time":1742012115,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":2178,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 64d3f94a-36ce-4ff5-8853-d830db994427
log_level: critical
event_category: detections
event_data:
{"connection_id":1672801,"detection_time":1742012121,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":51433,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 32971859-ca42-4904-bda4-0e5f07fe3283
log_level: critical
event_category: detections
event_data:
{"connection_id":1672946,"detection_time":1742012156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":15476,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3995e204-7339-44b6-8cfd-009fea2fd463
log_level: critical
event_category: detections
event_data:
{"connection_id":1672968,"detection_time":1742012162,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":7681,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7578bbf-7b14-4c59-b8da-235f985d162c
log_level: critical
event_category: detections
event_data:
{"connection_id":1672997,"detection_time":1742012169,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":57856,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 810c7840-852c-407e-a5cf-21aa697cc853
log_level: critical
event_category: detections
event_data:
{"connection_id":1673885,"detection_time":1742012436,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":36990,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9b15c36d-550f-4b4d-8ff7-7e81b3e7d29c
log_level: critical
event_category: detections
event_data:
{"connection_id":1673908,"detection_time":1742012442,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":26158,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5aa53848-a727-4d29-99cb-84ecdcff720b
log_level: critical
event_category: detections
event_data:
{"connection_id":1673941,"detection_time":1742012448,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":14922,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02ed60c6-53a2-4ad7-9de6-aaa2cf9626dc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012510,"event_type_id":6,"status":"blocked"}


event_id: a50597f4-ec59-401e-bbe0-23845be1014d
log_level: critical
event_category: detections
event_data:
{"connection_id":1674140,"detection_time":1742012510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60722,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 565a1c98-1712-4927-a6f1-85ab75a9a784
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742012575,"event_type_id":6,"status":"blocked"}


event_id: 4ddecfd6-0f14-4e42-b89e-b290fcc2b2a6
log_level: critical
event_category: detections
event_data:
{"connection_id":1674391,"detection_time":1742012575,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46232,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: da6794c8-81d2-43ea-a4d6-74c44bbf3f70
log_level: critical
event_category: detections
event_data:
{"connection_id":1676331,"detection_time":1742013123,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":41914,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 259e3acf-98ac-4c22-9ea6-f39af049a446
log_level: critical
event_category: detections
event_data:
{"connection_id":1676358,"detection_time":1742013130,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":29115,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d8291432-f2e3-430f-a961-48dcb382b23c
log_level: critical
event_category: detections
event_data:
{"connection_id":1676382,"detection_time":1742013136,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":14885,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dc482a9a-4098-4adb-a316-f6d316666ac5
log_level: critical
event_category: detections
event_data:
{"connection_id":1677249,"detection_time":1742013375,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":36216,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c823069b-3547-4d07-a552-28ef24b3c5dd
log_level: critical
event_category: detections
event_data:
{"connection_id":1677278,"detection_time":1742013382,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":29338,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9ecc860d-8157-4a2e-ab17-07ce16e31589
log_level: critical
event_category: detections
event_data:
{"connection_id":1677295,"detection_time":1742013388,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":21489,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0334484c-0b43-42d2-8169-0438877b69df
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742013479,"event_type_id":6,"status":"blocked"}


event_id: c7726e7b-49d5-4c52-a182-21ff738f4551
log_level: critical
event_category: detections
event_data:
{"connection_id":1677588,"detection_time":1742013479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57743,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f34e6545-6300-4a12-8390-eb1351e3ce52
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742013579,"event_type_id":6,"status":"blocked"}


event_id: 41063013-f287-4f5f-8b06-88d719b09b86
log_level: critical
event_category: detections
event_data:
{"connection_id":1677918,"detection_time":1742013579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37312,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a22526cc-6faf-4792-b9bd-467a12d00348
log_level: critical
event_category: detections
event_data:
{"connection_id":1678288,"detection_time":1742013694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":34714,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 27037d26-aab9-4c99-98f4-74275b0321ba
log_level: critical
event_category: detections
event_data:
{"connection_id":1678306,"detection_time":1742013700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":26748,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f63073c9-7d90-4481-8cc7-0b5c3234d9ec
log_level: critical
event_category: detections
event_data:
{"connection_id":1678336,"detection_time":1742013707,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":17733,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 59cef686-5b67-48ef-ac1e-9e82eefa2b3c
log_level: critical
event_category: detections
event_data:
{"connection_id":1678361,"detection_time":1742013711,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":53872,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 22a50b6c-8b70-4bec-aee9-9956c1ad9dd8
log_level: critical
event_category: detections
event_data:
{"connection_id":1678381,"detection_time":1742013718,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":45461,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec0d2ab8-ec82-4838-ac2c-805e49b39028
log_level: critical
event_category: detections
event_data:
{"connection_id":1678404,"detection_time":1742013724,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":36558,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 63dba013-f99f-4a6e-b15a-64cb6d545423
log_level: critical
event_category: detections
event_data:
{"connection_id":1679124,"detection_time":1742013950,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":9719,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bd6eb62b-19f3-4349-a37b-1a0a65cf7c09
log_level: critical
event_category: detections
event_data:
{"connection_id":1679144,"detection_time":1742013956,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":58047,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dc000501-e578-4d5a-9b6c-67b48f66622d
log_level: critical
event_category: detections
event_data:
{"connection_id":1679170,"detection_time":1742013963,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":47390,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 802df919-0cb2-4bd5-aba5-669d21d2e67b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742014088,"event_type_id":6,"status":"blocked"}


event_id: 8ddf41df-78b4-41f2-b06a-4f442da0dae4
log_level: critical
event_category: detections
event_data:
{"connection_id":1679597,"detection_time":1742014088,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46561,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ae87b037-21de-4ec6-b3e6-26175245d75a
log_level: critical
event_category: detections
event_data:
{"connection_id":1679811,"detection_time":1742014159,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":2039,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 849e183f-8275-4151-a6bd-86f0cce42728
log_level: critical
event_category: detections
event_data:
{"connection_id":1679839,"detection_time":1742014166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":52028,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 26e0359a-181e-4e01-a949-7138620e7979
log_level: critical
event_category: detections
event_data:
{"connection_id":1679856,"detection_time":1742014172,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":43057,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 947bccf7-b39b-4f55-852a-8e888f0d8b8f
log_level: critical
event_category: detections
event_data:
{"connection_id":1680804,"detection_time":1742014464,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":9705,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30441789-d76e-47e9-baa5-4fe31ce73692
log_level: critical
event_category: detections
event_data:
{"connection_id":1680818,"detection_time":1742014470,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":1243,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ada84329-838a-456a-a9eb-80756c1f6dcb
log_level: critical
event_category: detections
event_data:
{"connection_id":1680832,"detection_time":1742014476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":51385,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 56f3d40b-4a39-4977-8dfe-7324a717b811
log_level: critical
event_category: detections
event_data:
{"connection_id":1680845,"detection_time":1742014481,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":48700,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bea5e23a-2303-4d8c-b4a2-1e2ebbac3935
log_level: critical
event_category: detections
event_data:
{"connection_id":1680865,"detection_time":1742014488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":40405,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 72532d8f-aa09-4ba1-9bf9-85883b7edb85
log_level: critical
event_category: detections
event_data:
{"connection_id":1680892,"detection_time":1742014494,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":31157,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e0389bbd-99fd-4438-9f52-c89b7d6f4c6d
log_level: critical
event_category: detections
event_data:
{"connection_id":1681063,"detection_time":1742014551,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":48621,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 07229026-857f-48fc-b7ae-99cab6812ed0
log_level: critical
event_category: detections
event_data:
{"connection_id":1681082,"detection_time":1742014557,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":39960,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e1bba5e6-0773-4f07-beb0-1d3830168b8c
log_level: critical
event_category: detections
event_data:
{"connection_id":1681110,"detection_time":1742014563,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":30674,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c06984b4-d4e3-4cfe-9f1f-32525246dd79
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742014585,"event_type_id":6,"status":"blocked"}


event_id: d59692e9-839a-4413-bd60-fb82ebe68987
log_level: critical
event_category: detections
event_data:
{"connection_id":1681184,"detection_time":1742014585,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55688,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d49ab91f-d0c2-47dd-a53b-3c96d02fb796
log_level: critical
event_category: detections
event_data:
{"connection_id":1681717,"detection_time":1742014765,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":47512,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 79d45c21-8b00-4056-ae75-e11aa4744f97
log_level: critical
event_category: detections
event_data:
{"connection_id":1681733,"detection_time":1742014772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":38234,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 208d371c-fb32-4b23-b999-25391bf49111
log_level: critical
event_category: detections
event_data:
{"connection_id":1681763,"detection_time":1742014778,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":29147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5e6511ab-3f60-43eb-93d4-8dce7e7a0984
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742015087,"event_type_id":6,"status":"blocked"}


event_id: 692b10a9-9d09-4107-918f-1e38ed51697e
log_level: critical
event_category: detections
event_data:
{"connection_id":1682842,"detection_time":1742015087,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a5a4176e-48a4-4227-9b9c-0fcb9342ab02
log_level: critical
event_category: detections
event_data:
{"connection_id":1682849,"detection_time":1742015088,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":45187,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 21fb3d46-9e2a-4ab8-8d9c-214fd1bc46da
log_level: critical
event_category: detections
event_data:
{"connection_id":1682865,"detection_time":1742015094,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":30333,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8a4d7a6c-1cf6-4280-805f-73eda82df91d
log_level: critical
event_category: detections
event_data:
{"connection_id":1682902,"detection_time":1742015100,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":19334,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 00a8570f-2a65-49f8-8458-f3ac9ae9e331
log_level: critical
event_category: detections
event_data:
{"connection_id":1683711,"detection_time":1742015341,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":51114,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c378f2b6-8cfd-482e-94e4-370af2611e6d
log_level: critical
event_category: detections
event_data:
{"connection_id":1683730,"detection_time":1742015348,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":43222,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14b57928-c498-440d-80ca-e4f4a10d0bd4
log_level: critical
event_category: detections
event_data:
{"connection_id":1683752,"detection_time":1742015354,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":32566,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6a1f15f8-b32f-4068-b729-ec314c8028e6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742015423,"event_type_id":6,"status":"blocked"}


event_id: 5b262512-44f3-4493-85e6-f9cb9f0fd5c5
log_level: critical
event_category: detections
event_data:
{"connection_id":1683985,"detection_time":1742015423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52974,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 47b9b6ff-caea-4774-8fb2-d928407b8db0
log_level: critical
event_category: detections
event_data:
{"connection_id":1684378,"detection_time":1742015545,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":3365,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c35a91b1-6061-4ac9-955f-52d295d0b87f
log_level: critical
event_category: detections
event_data:
{"connection_id":1684390,"detection_time":1742015552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":53066,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cb3fd9c2-23d8-4fec-b64f-bb6e96ee884f
log_level: critical
event_category: detections
event_data:
{"connection_id":1684406,"detection_time":1742015558,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":42988,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 82261f86-a5b3-4410-abe9-c8d653e6d547
log_level: critical
event_category: detections
event_data:
{"connection_id":1685341,"detection_time":1742015841,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":59030,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86717cfa-48de-4b3c-a48a-7811b10bdc2f
log_level: critical
event_category: detections
event_data:
{"connection_id":1685356,"detection_time":1742015848,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":48766,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cbaaacd0-80d6-4ae4-89d4-752549d023fc
log_level: critical
event_category: detections
event_data:
{"connection_id":1685382,"detection_time":1742015854,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":38698,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 13ed2b4d-c13e-41eb-bad1-ac70e0a7cf64
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742015917,"event_type_id":6,"status":"blocked"}


event_id: 85d21573-a3eb-43cd-854c-c53506a55164
log_level: critical
event_category: detections
event_data:
{"connection_id":1685565,"detection_time":1742015917,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52051,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9855d5f8-0496-4466-8a65-325304d4d2db
log_level: critical
event_category: detections
event_data:
{"connection_id":1685847,"detection_time":1742016001,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":44777,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4466f62d-6550-43bc-9db4-38f8dab05193
log_level: critical
event_category: detections
event_data:
{"connection_id":1685872,"detection_time":1742016007,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":35902,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 439377d0-d44f-48d9-b5ee-b30bf12b5421
log_level: critical
event_category: detections
event_data:
{"connection_id":1685901,"detection_time":1742016013,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":27092,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7767caeb-387d-40d1-b529-b7cbb33fd0ac
log_level: critical
event_category: detections
event_data:
{"connection_id":1686597,"detection_time":1742016242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":34396,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30a49194-f072-4f1a-9d44-9e77bb31829d
log_level: critical
event_category: detections
event_data:
{"connection_id":1686633,"detection_time":1742016248,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":24468,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c0c8a2e3-00c8-4e5d-8341-fcf3b9798617
log_level: critical
event_category: detections
event_data:
{"connection_id":1686651,"detection_time":1742016255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":14300,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 70e98ebe-ad4b-444d-8b6c-043e5ee3edba
log_level: critical
event_category: detections
event_data:
{"connection_id":1686684,"detection_time":1742016266,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":39737,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fdc8c26d-416e-4c18-b382-c64d96d5267f
log_level: critical
event_category: detections
event_data:
{"connection_id":1686704,"detection_time":1742016272,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":26083,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0805ee43-8fb5-4777-82e3-b11a005c8b2b
log_level: critical
event_category: detections
event_data:
{"connection_id":1686721,"detection_time":1742016278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":12013,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f2aad61-981b-443d-90f6-5c7df32588de
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742016596,"event_type_id":6,"status":"blocked"}


event_id: a0bd6e6b-716b-4e4f-9847-bac3b2c8618a
log_level: critical
event_category: detections
event_data:
{"connection_id":1687776,"detection_time":1742016596,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36154,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a83bf94-42b2-4acb-a0ce-c5c9e7bb4e91
log_level: critical
event_category: detections
event_data:
{"connection_id":1687824,"detection_time":1742016610,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":49152,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 44871d90-9e80-4b8a-aa1b-d7bf37584b8a
log_level: critical
event_category: detections
event_data:
{"connection_id":1687843,"detection_time":1742016616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":35835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7a97d431-b608-46ab-9066-bfb6f41c4950
log_level: critical
event_category: detections
event_data:
{"connection_id":1687856,"detection_time":1742016623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":21997,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5e45c62-cb1a-444e-85d8-b7628c25b16e
log_level: critical
event_category: detections
event_data:
{"connection_id":1688755,"detection_time":1742016868,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":49196,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3d2fce5a-b51d-4207-b090-7fe3a515efee
log_level: critical
event_category: detections
event_data:
{"connection_id":1688770,"detection_time":1742016875,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":39250,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 36e42705-7509-4c85-bb0f-6d27e0146f6c
log_level: critical
event_category: detections
event_data:
{"connection_id":1688784,"detection_time":1742016881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":28546,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c2d469f-fecd-4d7b-8120-1034c4dec745
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742016885,"event_type_id":6,"status":"blocked"}


event_id: 36f38c34-cc13-459e-ae13-ddc9a921ac29
log_level: critical
event_category: detections
event_data:
{"connection_id":1688809,"detection_time":1742016885,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49372,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a3a01a5-1177-41a2-af2d-f8ada0ec2aa2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742017104,"event_type_id":6,"status":"blocked"}


event_id: 30c554d2-86c2-4753-8e81-b013d684da6b
log_level: critical
event_category: detections
event_data:
{"connection_id":1689528,"detection_time":1742017104,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45287,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb6008f6-1dbd-46da-b769-5525ed87a310
log_level: critical
event_category: detections
event_data:
{"connection_id":1690592,"detection_time":1742017434,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":28478,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: db1c0a4b-cad8-4674-a9b6-97debdb039a9
log_level: critical
event_category: detections
event_data:
{"connection_id":1690605,"detection_time":1742017440,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":19175,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 56a884f3-2653-4c98-84c5-79a76c5d847b
log_level: critical
event_category: detections
event_data:
{"connection_id":1690631,"detection_time":1742017447,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":9771,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc02c2da-f181-4104-8309-539d2f5c72b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742017600,"event_type_id":6,"status":"blocked"}


event_id: 5d3da96a-ce4b-48b2-928f-c326d8d1e93f
log_level: critical
event_category: detections
event_data:
{"connection_id":1691137,"detection_time":1742017600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54568,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c10b65eb-7b83-4e9c-9e70-0322d969c35c
log_level: critical
event_category: detections
event_data:
{"connection_id":1691201,"detection_time":1742017624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":30532,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7f7a8bd0-0fed-41e3-9ede-7a4d7a789fcc
log_level: critical
event_category: detections
event_data:
{"connection_id":1691242,"detection_time":1742017630,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":19352,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 003c2876-1365-4449-8432-44042ae2d9c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1691263,"detection_time":1742017637,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":6833,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 351d7db0-c6fd-404d-bd28-5ca54ef82dcc
log_level: critical
event_category: detections
event_data:
{"connection_id":1691403,"detection_time":1742017685,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":6034,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8d4142e9-4d9f-42d4-8e3c-b6986c45b3d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1691427,"detection_time":1742017692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":53658,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e9ab8883-48ea-4598-b8ca-7c3e06f6d9b9
log_level: critical
event_category: detections
event_data:
{"connection_id":1691443,"detection_time":1742017698,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":41618,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2e75644f-7dd4-46bb-8d45-5afbe71a779d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742017853,"event_type_id":6,"status":"blocked"}


event_id: 49f69c58-bcdc-49a3-bf8d-a736a64a024f
log_level: critical
event_category: detections
event_data:
{"connection_id":1691927,"detection_time":1742017853,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46246,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a99dea8-ec10-4faa-a1f3-34276876115a
log_level: critical
event_category: detections
event_data:
{"connection_id":1692212,"detection_time":1742017947,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":38971,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bfd0df87-8165-4fd6-a179-4c3e46e9604b
log_level: critical
event_category: detections
event_data:
{"connection_id":1692232,"detection_time":1742017953,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":29153,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b3550c8-3f89-4083-a19f-b3991e2c9a71
log_level: critical
event_category: detections
event_data:
{"connection_id":1692253,"detection_time":1742017959,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":20074,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2f29f9ab-7d83-461e-bccf-0b778dae9b4f
log_level: critical
event_category: detections
event_data:
{"connection_id":1692696,"detection_time":1742018108,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":23006,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e5041a8e-8f45-47e9-8269-a5508ae0e381
log_level: critical
event_category: detections
event_data:
{"connection_id":1692725,"detection_time":1742018115,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":14272,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9f1a94f9-222c-439d-b292-dbac4ebd0c83
log_level: critical
event_category: detections
event_data:
{"connection_id":1692737,"detection_time":1742018121,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":4446,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c6f9d3f4-100d-41a7-965b-5da58805c568
log_level: critical
event_category: detections
event_data:
{"connection_id":1693136,"detection_time":1742018242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":57252,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2c2abf0a-a4a4-49ef-9a62-54a8b4271960
log_level: critical
event_category: detections
event_data:
{"connection_id":1693156,"detection_time":1742018248,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":43904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 18a6f035-7b09-4697-8082-1eacb0d2ef59
log_level: critical
event_category: detections
event_data:
{"connection_id":1693172,"detection_time":1742018255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":30158,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff8b6c80-b3ac-4b56-9538-cbc35b40bbd6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742018342,"event_type_id":6,"status":"blocked"}


event_id: 5c41af44-aa63-487d-a8b4-1013889f9f1f
log_level: critical
event_category: detections
event_data:
{"connection_id":1693437,"detection_time":1742018342,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44932,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82a6d6c4-f6b4-4618-ad46-993a625fe945
log_level: critical
event_category: detections
event_data:
{"connection_id":1694754,"detection_time":1742018700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":47026,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 71808fea-3b4b-49f2-a2f1-357cbda31cf9
log_level: critical
event_category: detections
event_data:
{"connection_id":1694775,"detection_time":1742018706,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":34415,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e6c869c5-df35-42b1-a914-869fa0eb3ee8
log_level: critical
event_category: detections
event_data:
{"connection_id":1694804,"detection_time":1742018712,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":21277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 44d1b455-80f0-4ea9-8f62-13cab9fa1f35
log_level: critical
event_category: detections
event_data:
{"connection_id":1695387,"detection_time":1742018886,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":20795,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e0f99a0a-f899-4b8b-b517-1e25f41d30bb
log_level: critical
event_category: detections
event_data:
{"connection_id":1695404,"detection_time":1742018892,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":10768,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 75a62387-68c8-4ee4-8a28-1f8d7cbd8499
log_level: critical
event_category: detections
event_data:
{"connection_id":1695416,"detection_time":1742018896,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":21125,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 36316169-453c-4729-b4d3-c735db8c7c79
log_level: critical
event_category: detections
event_data:
{"connection_id":1695420,"detection_time":1742018899,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":59164,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5163f4ea-473a-4f98-bf87-5dd7f4c5d054
log_level: critical
event_category: detections
event_data:
{"connection_id":1695431,"detection_time":1742018903,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":7728,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8c40324f-fda2-4296-8015-ba79a368073f
log_level: critical
event_category: detections
event_data:
{"connection_id":1695466,"detection_time":1742018909,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":52589,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b213bf6c-39fb-4761-9d69-052d2c368e85
log_level: critical
event_category: detections
event_data:
{"connection_id":1695998,"detection_time":1742019067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":34612,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e4d23648-8626-41b1-bf7e-660c58648e1b
log_level: critical
event_category: detections
event_data:
{"connection_id":1696015,"detection_time":1742019073,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":19949,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4040b3b9-f1ed-419d-9493-7067e4f010d7
log_level: critical
event_category: detections
event_data:
{"connection_id":1696040,"detection_time":1742019080,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":5748,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 78727bdc-7c57-4a8f-827a-7fc336cff0a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742019113,"event_type_id":6,"status":"blocked"}


event_id: 54a53203-ac55-4f3e-971f-438367f7ee87
log_level: critical
event_category: detections
event_data:
{"connection_id":1696136,"detection_time":1742019113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55428,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c37aa83b-6f56-444f-aff2-9827bd665563
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742019313,"event_type_id":6,"status":"blocked"}


event_id: 894e0343-13ff-44e6-a735-03370276dd28
log_level: critical
event_category: detections
event_data:
{"connection_id":1696793,"detection_time":1742019313,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41931,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2af23c53-4c29-4bc3-a820-4a0c40c8ef23
log_level: critical
event_category: detections
event_data:
{"connection_id":1696825,"detection_time":1742019326,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":6617,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee7d5511-5c9f-49c1-876b-f2b03e209465
log_level: critical
event_category: detections
event_data:
{"connection_id":1696846,"detection_time":1742019332,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":51688,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f6aef794-4ff6-4252-9450-a948ac6b3933
log_level: critical
event_category: detections
event_data:
{"connection_id":1696862,"detection_time":1742019339,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":37113,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac5018de-ea34-4394-bd84-f9ca1200968a
log_level: critical
event_category: detections
event_data:
{"connection_id":1697252,"detection_time":1742019452,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":51850,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d3eb8017-45d1-4e4f-b698-dcd67de6a338
log_level: critical
event_category: detections
event_data:
{"connection_id":1697274,"detection_time":1742019458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":43164,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60af33b8-02f2-4d7a-beb3-123d321a08b3
log_level: critical
event_category: detections
event_data:
{"connection_id":1697286,"detection_time":1742019465,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":33544,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f29c2c2f-5a64-4b01-9f2a-fe4db5d00d97
log_level: critical
event_category: detections
event_data:
{"connection_id":1697619,"detection_time":1742019566,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":24029,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 32952995-3221-42aa-9b56-9527a062cd71
log_level: critical
event_category: detections
event_data:
{"connection_id":1697637,"detection_time":1742019572,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":14406,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ed14e406-de89-4425-88c1-79802c0e2cce
log_level: critical
event_category: detections
event_data:
{"connection_id":1697658,"detection_time":1742019579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":4333,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5b2f9714-5902-48f0-86d1-4ffdf5697314
log_level: critical
event_category: detections
event_data:
{"connection_id":1697906,"detection_time":1742019656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":59176,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1bff0594-47b9-4607-b497-5e5af641300c
log_level: critical
event_category: detections
event_data:
{"connection_id":1697944,"detection_time":1742019662,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":50419,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c5e850f-8f91-4e0c-866e-cf1854c9454d
log_level: critical
event_category: detections
event_data:
{"connection_id":1697966,"detection_time":1742019669,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":41132,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dd93e373-9ef8-4d28-a614-cd942e568970
log_level: critical
event_category: detections
event_data:
{"connection_id":1698250,"detection_time":1742019762,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":15608,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 75a4289e-dc9b-4c3a-a6ab-deccfd69cb62
log_level: critical
event_category: detections
event_data:
{"connection_id":1698275,"detection_time":1742019769,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":6324,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f55e4e6-e445-4895-b4c7-5123352b8770
log_level: critical
event_category: detections
event_data:
{"connection_id":1698291,"detection_time":1742019775,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":56249,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d0a4ffcc-93aa-4b24-8890-3cbe531b6122
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742019797,"event_type_id":6,"status":"blocked"}


event_id: 0431fa76-03fe-4ff2-ad20-b38acd0ae1c9
log_level: critical
event_category: detections
event_data:
{"connection_id":1698371,"detection_time":1742019797,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40940,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e7d9bb0e-18c5-40df-9f90-e48d34e36510
log_level: critical
event_category: detections
event_data:
{"connection_id":1698776,"detection_time":1742019926,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.37.69.105","remote_port":65204,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ce96a18f-9e93-4ff4-8fdc-1b82c66d855b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742020117,"event_type_id":6,"status":"blocked"}


event_id: c69e4280-13ca-4355-a7dd-d8ba5de94c01
log_level: critical
event_category: detections
event_data:
{"connection_id":1699394,"detection_time":1742020117,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45191,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92b9efed-1629-431d-a614-6dc9ab26444a
log_level: critical
event_category: detections
event_data:
{"connection_id":1699902,"detection_time":1742020278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":27114,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ab7660b6-2be6-49ee-955c-101cb34fb071
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742020282,"event_type_id":6,"status":"blocked"}


event_id: f6b86550-9e06-481a-a364-cddd123ea91a
log_level: critical
event_category: detections
event_data:
{"connection_id":1699912,"detection_time":1742020282,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39646,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 961ee8fd-8fa6-4485-b941-e313b0358786
log_level: critical
event_category: detections
event_data:
{"connection_id":1699918,"detection_time":1742020284,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":17491,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d0706f0c-8adc-4fe5-b2a4-4e678c28334c
log_level: critical
event_category: detections
event_data:
{"connection_id":1699951,"detection_time":1742020291,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":6299,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f886a5bf-0e45-4e2d-968f-60decf4f115b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742020620,"event_type_id":6,"status":"blocked"}


event_id: adbcc9cf-e615-4c09-91f3-616b9e5b0e1f
log_level: critical
event_category: detections
event_data:
{"connection_id":1701112,"detection_time":1742020620,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54561,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: beab8abb-c0f2-4680-a5d3-d6bc7f805ef7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742021127,"event_type_id":6,"status":"blocked"}


event_id: 84105cc7-4ea0-4df5-a69b-870f5fe0235c
log_level: critical
event_category: detections
event_data:
{"connection_id":1702741,"detection_time":1742021127,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35641,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 89b1c5f5-54be-47eb-9022-dbce043e1986
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742021258,"event_type_id":6,"status":"blocked"}


event_id: 2b1fa755-864b-4ca9-9a14-9f1091cbd0fa
log_level: critical
event_category: detections
event_data:
{"connection_id":1703175,"detection_time":1742021258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36833,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 20e054ac-1448-408e-957f-cbb28a801a98
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742021622,"event_type_id":6,"status":"blocked"}


event_id: 0c784ba2-4e3e-4439-817b-0ce3c4788112
log_level: critical
event_category: detections
event_data:
{"connection_id":1704343,"detection_time":1742021622,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44634,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca5ad679-6949-45fa-8b1c-b4e1cdb5e8dd
log_level: critical
event_category: detections
event_data:
{"connection_id":1705437,"detection_time":1742021951,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":15781,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 69c7afc8-7e55-491c-a002-00f4923113b4
log_level: critical
event_category: detections
event_data:
{"connection_id":1705453,"detection_time":1742021957,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":5835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9c65b266-e4a4-4a6d-a17d-50e14917c380
log_level: critical
event_category: detections
event_data:
{"connection_id":1705467,"detection_time":1742021964,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":56583,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4cf12b51-24d3-4262-ade9-6291c730e108
log_level: critical
event_category: detections
event_data:
{"connection_id":1705720,"detection_time":1742022038,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":28593,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4cb02d1e-68a0-44f8-8ef9-404301768d05
log_level: critical
event_category: detections
event_data:
{"connection_id":1705739,"detection_time":1742022044,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":14818,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: afe1939d-a59f-4247-9474-bb9d3f7039e5
log_level: critical
event_category: detections
event_data:
{"connection_id":1705760,"detection_time":1742022051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":1120,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c87920b-fce9-4ad8-93d8-9712cc4cfbea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022124,"event_type_id":6,"status":"blocked"}


event_id: 6cd6e37b-40e4-403a-bc96-d5dbdaddcfcb
log_level: critical
event_category: detections
event_data:
{"connection_id":1706034,"detection_time":1742022124,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53860,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1090cc12-9514-4fe5-a1c1-f8f12626974a
log_level: critical
event_category: detections
event_data:
{"connection_id":1706135,"detection_time":1742022144,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":38029,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 835179a4-f3fe-406d-bafe-e2e05ff2f992
log_level: critical
event_category: detections
event_data:
{"connection_id":1706159,"detection_time":1742022151,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":24559,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5cf1ed71-6708-4436-93b1-f645f148ec55
log_level: critical
event_category: detections
event_data:
{"connection_id":1706175,"detection_time":1742022157,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":12843,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d5d35806-5870-43d9-9dbc-ea3fac94fae0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022227,"event_type_id":6,"status":"blocked"}


event_id: 350f061c-89c9-43fc-866d-efdec2d5c2b6
log_level: critical
event_category: detections
event_data:
{"connection_id":1706457,"detection_time":1742022227,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34677,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b887c188-f4f8-4147-94e5-f5ae71676c60
log_level: critical
event_category: detections
event_data:
{"connection_id":1707532,"detection_time":1742022555,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":40314,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a66ffd74-3a3a-4bfe-8eec-01e8e7d285f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1707544,"detection_time":1742022561,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":31312,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f385fc03-70aa-4808-b434-ba8c7e18a26e
log_level: critical
event_category: detections
event_data:
{"connection_id":1707565,"detection_time":1742022568,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":21660,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1e956be0-e9eb-4a1c-92a2-997f7732602a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022626,"event_type_id":6,"status":"blocked"}


event_id: cb8bc610-ff6d-4237-9c39-4654deb51127
log_level: critical
event_category: detections
event_data:
{"connection_id":1707795,"detection_time":1742022626,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34391,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c987e56-ed21-439f-b1e1-227912e1ab66
log_level: critical
event_category: detections
event_data:
{"connection_id":1707834,"detection_time":1742022638,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":31834,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac2462c9-bc6a-4c2c-8f46-8e72e9dc056f
log_level: critical
event_category: detections
event_data:
{"connection_id":1707852,"detection_time":1742022644,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":22162,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 53febe7c-c109-4e83-ae66-d3b82b10714a
log_level: critical
event_category: detections
event_data:
{"connection_id":1707866,"detection_time":1742022650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":12093,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 926ed613-e652-471c-926b-a993d78f3f9d
log_level: critical
event_category: detections
event_data:
{"connection_id":1708014,"detection_time":1742022695,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":50002,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 78494087-2944-46d1-85ab-afb6dac2e606
log_level: critical
event_category: detections
event_data:
{"connection_id":1708031,"detection_time":1742022702,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":36014,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1c3bf048-2597-40c7-9420-f131c59b673e
log_level: critical
event_category: detections
event_data:
{"connection_id":1708066,"detection_time":1742022708,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":21386,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ba2e9d9-3633-46e6-8c85-6f92a8a84aab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742022716,"event_type_id":6,"status":"blocked"}


event_id: 16d086e6-4368-48b9-89f7-1c3e0f8f50c4
log_level: critical
event_category: detections
event_data:
{"connection_id":1708083,"detection_time":1742022716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33584,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2fa89f68-2e90-47bc-81af-2b1a10068328
log_level: critical
event_category: detections
event_data:
{"connection_id":1708627,"detection_time":1742022884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":38868,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f5768cba-68a8-4588-8648-ab9278795896
log_level: critical
event_category: detections
event_data:
{"connection_id":1708660,"detection_time":1742022890,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":30150,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9381f9bf-5893-44de-95dd-8a62cf71380c
log_level: critical
event_category: detections
event_data:
{"connection_id":1708683,"detection_time":1742022897,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":19954,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ce41040c-85e0-4f99-a060-abd9fc8dbacc
log_level: critical
event_category: detections
event_data:
{"connection_id":1708865,"detection_time":1742022944,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":29366,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14a1b3a3-478e-44ac-ba09-3b1e24ab945a
log_level: critical
event_category: detections
event_data:
{"connection_id":1708886,"detection_time":1742022951,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":19930,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee159477-cdfd-4d28-a518-75381a3677c8
log_level: critical
event_category: detections
event_data:
{"connection_id":1708902,"detection_time":1742022957,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":10114,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7d6319f-eb69-45a2-8a94-7e9b40fc586f
log_level: critical
event_category: detections
event_data:
{"connection_id":1709341,"detection_time":1742023093,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":42040,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bb4eb7e0-15f1-4339-b941-d305452deca5
log_level: critical
event_category: detections
event_data:
{"connection_id":1709372,"detection_time":1742023100,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":28453,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec2da1c7-0571-4874-b89a-1cb025c59ae5
log_level: critical
event_category: detections
event_data:
{"connection_id":1709390,"detection_time":1742023106,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":15068,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0696d5ab-3d45-47f4-87a3-cc955c92a06c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742023135,"event_type_id":6,"status":"blocked"}


event_id: d54aedfd-f6b5-476c-9a09-253f05f33455
log_level: critical
event_category: detections
event_data:
{"connection_id":1709487,"detection_time":1742023135,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43480,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3686cce1-53ad-4f43-952f-cb858eee4cd3
log_level: critical
event_category: detections
event_data:
{"connection_id":1709962,"detection_time":1742023280,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":30685,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5756c98d-5580-4bc7-85bc-8439fea7c1a4
log_level: critical
event_category: detections
event_data:
{"connection_id":1709977,"detection_time":1742023286,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":21362,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f61d08f9-3dec-49ed-9aed-cdaefaced08e
log_level: critical
event_category: detections
event_data:
{"connection_id":1710010,"detection_time":1742023293,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":11822,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 00e1e043-3ce7-4f8f-8c84-848540f3ec16
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742023633,"event_type_id":6,"status":"blocked"}


event_id: 5f317ba1-a1f5-4cf6-8a01-66bb6471dd67
log_level: critical
event_category: detections
event_data:
{"connection_id":1711174,"detection_time":1742023633,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52044,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83184f8a-62f9-434a-8e62-561e733ca709
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742023689,"event_type_id":6,"status":"blocked"}


event_id: 09101763-d15a-4224-b63c-a91eafce1002
log_level: critical
event_category: detections
event_data:
{"connection_id":1711381,"detection_time":1742023689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60073,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bea18e20-3dd8-4434-8ffd-3de9b6eaac38
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024140,"event_type_id":6,"status":"blocked"}


event_id: bcb680c8-334e-41dd-b7a1-8deae8a242d2
log_level: critical
event_category: detections
event_data:
{"connection_id":1713130,"detection_time":1742024140,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60951,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7279b213-53e6-4889-899b-2334ffa8badf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024174,"event_type_id":6,"status":"blocked"}


event_id: 96d025e4-1629-4e44-9682-c99ed0e30020
log_level: critical
event_category: detections
event_data:
{"connection_id":1713257,"detection_time":1742024174,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58667,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e4922cd9-7469-4558-85a5-34fde1a66ca6
log_level: critical
event_category: detections
event_data:
{"connection_id":1713640,"detection_time":1742024283,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":43753,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 70f8901a-9ced-45e2-8725-7b8124715555
log_level: critical
event_category: detections
event_data:
{"connection_id":1713673,"detection_time":1742024290,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":30442,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 56133569-cb32-4304-a001-f67bc385a611
log_level: critical
event_category: detections
event_data:
{"connection_id":1713695,"detection_time":1742024296,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":16535,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5b8783ac-e1b8-4561-8e67-0eaaf1803e9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024637,"event_type_id":6,"status":"blocked"}


event_id: 302adfd5-0bf5-4bd3-8a19-b523b54d2c4a
log_level: critical
event_category: detections
event_data:
{"connection_id":1714913,"detection_time":1742024637,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42186,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2901c634-089a-435d-a188-0271d2295e34
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742024661,"event_type_id":6,"status":"blocked"}


event_id: 8e3410b9-6622-4088-910f-f0c780dcc057
log_level: critical
event_category: detections
event_data:
{"connection_id":1715006,"detection_time":1742024661,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57410,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dcd7ca12-11fa-4b90-8a4a-cdcd40eea6be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742025147,"event_type_id":6,"status":"blocked"}


event_id: 1461968e-a2c1-482e-b40f-2bba8611db1d
log_level: critical
event_category: detections
event_data:
{"connection_id":1716716,"detection_time":1742025147,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51486,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c681fde3-d691-4a26-895d-bf873b333f71
log_level: critical
event_category: detections
event_data:
{"connection_id":1717978,"detection_time":1742025506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":59469,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bba2af2c-516f-4001-8376-73d45ac15042
log_level: critical
event_category: detections
event_data:
{"connection_id":1717996,"detection_time":1742025513,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":46228,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d1904634-7d71-4fd2-b652-f6ce6707650f
log_level: critical
event_category: detections
event_data:
{"connection_id":1718008,"detection_time":1742025519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":32320,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2807c73-c216-4d1c-a147-9c0892051d8b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742025645,"event_type_id":6,"status":"blocked"}


event_id: df1384c6-3f24-43db-9285-51336353bcc4
log_level: critical
event_category: detections
event_data:
{"connection_id":1718450,"detection_time":1742025645,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33524,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 111845d5-2406-4e25-b019-514dfacab617
log_level: critical
event_category: detections
event_data:
{"connection_id":1718599,"detection_time":1742025683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":51147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98989875-1984-4228-afd6-7e5199f10713
log_level: critical
event_category: detections
event_data:
{"connection_id":1718601,"detection_time":1742025683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":28427,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9bd7dc72-6536-4d3d-ada0-c3554c47a64a
log_level: critical
event_category: detections
event_data:
{"connection_id":1718611,"detection_time":1742025687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":9163,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 01c7cfd1-cdb4-40b5-b4e9-36fc6fd1a890
log_level: critical
event_category: detections
event_data:
{"connection_id":1718614,"detection_time":1742025689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":39956,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d40800ac-70ea-41a7-bd22-b251978cb0db
log_level: critical
event_category: detections
event_data:
{"connection_id":1718618,"detection_time":1742025689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":18393,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 49680a88-e861-40d0-a733-c1d7c3394553
log_level: critical
event_category: detections
event_data:
{"connection_id":1718637,"detection_time":1742025694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":1139,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 43fdc8ca-ee45-4eb4-8d78-51c368702c25
log_level: critical
event_category: detections
event_data:
{"connection_id":1718654,"detection_time":1742025695,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":28615,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4a532034-a1a6-44d9-8477-b3e37e7704b9
log_level: critical
event_category: detections
event_data:
{"connection_id":1718660,"detection_time":1742025696,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":8814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 800d06b0-e92d-4fe3-9ffd-0372a1072e1d
log_level: critical
event_category: detections
event_data:
{"connection_id":1718670,"detection_time":1742025700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":52807,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e5b66cad-189e-46d6-a634-a1f1fd373867
log_level: critical
event_category: detections
event_data:
{"connection_id":1719326,"detection_time":1742025856,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":41147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bbbe5db0-36e4-4926-899e-a2d5aa968ca3
log_level: critical
event_category: detections
event_data:
{"connection_id":1719344,"detection_time":1742025862,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":31679,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a4386497-756e-4eae-8779-f073ad115db2
log_level: critical
event_category: detections
event_data:
{"connection_id":1719365,"detection_time":1742025869,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":21494,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 719bd7ba-82d1-497e-8534-74f3d74710b2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742026124,"event_type_id":6,"status":"blocked"}


event_id: 765e0d98-3b3a-4e5f-8bf6-950951b91fae
log_level: critical
event_category: detections
event_data:
{"connection_id":1720272,"detection_time":1742026124,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51698,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 696445c2-9d17-4287-b813-535d01fcb374
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742026148,"event_type_id":6,"status":"blocked"}


event_id: 0089e6d9-7799-4e5a-9b1d-40019ac2b83c
log_level: critical
event_category: detections
event_data:
{"connection_id":1720358,"detection_time":1742026148,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43846,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6b47e615-522e-4adb-bfe2-fe3828d2c4a0
log_level: critical
event_category: detections
event_data:
{"connection_id":1721267,"detection_time":1742026424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":11852,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c311ecf-a1dc-495e-8f87-7b35e6cd9e74
log_level: critical
event_category: detections
event_data:
{"connection_id":1721286,"detection_time":1742026431,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":2951,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fe65ef52-82f1-4014-8f50-e59e31f758d0
log_level: critical
event_category: detections
event_data:
{"connection_id":1721304,"detection_time":1742026437,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":52835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0de58ab9-94f7-40b0-ae87-d9eda67e2214
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742026655,"event_type_id":6,"status":"blocked"}


event_id: 412b8d6d-6af3-4134-b473-29b0e11cd874
log_level: critical
event_category: detections
event_data:
{"connection_id":1722035,"detection_time":1742026655,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53406,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 53fed498-aebf-4364-9eb5-44ad50eb017e
log_level: critical
event_category: detections
event_data:
{"connection_id":1722549,"detection_time":1742026802,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":44862,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 21425570-0884-43b7-80dc-3a49b09a2a2d
log_level: critical
event_category: detections
event_data:
{"connection_id":1722573,"detection_time":1742026808,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":35583,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 46556089-26d3-488d-bec5-6200898697b3
log_level: critical
event_category: detections
event_data:
{"connection_id":1722600,"detection_time":1742026814,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":24317,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d33189da-3744-4e97-b9f3-51d064261b62
log_level: critical
event_category: detections
event_data:
{"connection_id":1722754,"detection_time":1742026868,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":45839,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 529d3beb-6e52-4457-bb01-e57faa2db18f
log_level: critical
event_category: detections
event_data:
{"connection_id":1722772,"detection_time":1742026874,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":36518,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7a01cc8d-58ba-40de-93db-8aea7269fc76
log_level: critical
event_category: detections
event_data:
{"connection_id":1722788,"detection_time":1742026878,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":21904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f77684df-5ec2-4a94-925e-995b42524142
log_level: critical
event_category: detections
event_data:
{"connection_id":1722797,"detection_time":1742026881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":27192,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d1abdb8d-9a2e-471d-96e2-d84ae50662cc
log_level: critical
event_category: detections
event_data:
{"connection_id":1722811,"detection_time":1742026884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":10602,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86812719-dd55-40e0-a3f4-63e7ac0cd6ad
log_level: critical
event_category: detections
event_data:
{"connection_id":1722845,"detection_time":1742026891,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":57056,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 248e8f37-20de-42b2-b469-3611b107e230
log_level: critical
event_category: detections
event_data:
{"connection_id":1723496,"detection_time":1742027086,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":39296,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b857b6bf-410b-4464-b4a5-8f2a8dde5eef
log_level: critical
event_category: detections
event_data:
{"connection_id":1723510,"detection_time":1742027092,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":24980,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 81bb730e-6a55-4bae-a544-d89c7e6d6a8e
log_level: critical
event_category: detections
event_data:
{"connection_id":1723530,"detection_time":1742027098,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":39355,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30e4e80e-2188-47a3-9f86-be62b9d738f2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742027162,"event_type_id":6,"status":"blocked"}


event_id: dd0fe9d1-11b1-4074-86fa-ecb11d20eea1
log_level: critical
event_category: detections
event_data:
{"connection_id":1723707,"detection_time":1742027162,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33906,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4683fd01-d654-48ac-91cf-52f63ad77dbb
log_level: critical
event_category: detections
event_data:
{"connection_id":1724258,"detection_time":1742027329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":52721,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec9847c2-5461-404d-af3a-e56bc04f7b54
log_level: critical
event_category: detections
event_data:
{"connection_id":1724275,"detection_time":1742027335,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":43277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e672a154-4349-4696-ba38-dea3db43f01a
log_level: critical
event_category: detections
event_data:
{"connection_id":1724293,"detection_time":1742027342,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":33773,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 202147b1-4284-4c81-abf3-a8f1b23386ae
log_level: critical
event_category: detections
event_data:
{"connection_id":1725027,"detection_time":1742027552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":3280,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b0ec498e-1069-4b3e-9aa6-54d3f92fec36
log_level: critical
event_category: detections
event_data:
{"connection_id":1725058,"detection_time":1742027558,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":52363,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 67f0b793-991c-4c61-943e-7e930af6b707
log_level: critical
event_category: detections
event_data:
{"connection_id":1725081,"detection_time":1742027565,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":43367,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ffcb1ac7-2156-475c-991f-c24abb580cda
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742027665,"event_type_id":6,"status":"blocked"}


event_id: e2c74bf5-8740-4e22-9025-d6ef400f6e9d
log_level: critical
event_category: detections
event_data:
{"connection_id":1725461,"detection_time":1742027665,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43718,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf531d0d-2a7e-4f56-a8e3-a522c124516c
log_level: critical
event_category: detections
event_data:
{"connection_id":1725993,"detection_time":1742027825,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":26277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e120e465-20a8-4cf8-990a-a34950b30c07
log_level: critical
event_category: detections
event_data:
{"connection_id":1726020,"detection_time":1742027831,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":17538,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e94025d0-837b-4bdf-89c6-8cbece12cbe3
log_level: critical
event_category: detections
event_data:
{"connection_id":1726053,"detection_time":1742027837,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":7629,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 110efbb5-35c4-4363-ac45-2a4601bdec16
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742028065,"event_type_id":6,"status":"blocked"}


event_id: 76477e7d-3383-431f-bd81-799997dd0c47
log_level: critical
event_category: detections
event_data:
{"connection_id":1726799,"detection_time":1742028065,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46906,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0efe7dfc-a045-44f2-8906-4ff99d1ca31b
log_level: critical
event_category: detections
event_data:
{"connection_id":1729565,"detection_time":1742028484,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":11605,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02781bb9-ac74-402c-93b2-dc35eed8f8d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1729609,"detection_time":1742028491,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":2937,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3182a62b-5a0d-4345-be42-ada2c420c957
log_level: critical
event_category: detections
event_data:
{"connection_id":1729665,"detection_time":1742028497,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":52889,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2dcf6201-4098-4a17-bb04-88818dfa3eb8
log_level: critical
event_category: detections
event_data:
{"connection_id":1730174,"detection_time":1742028567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":27739,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 594a8920-aa9e-43af-91e9-bfbbfbd00a3e
log_level: critical
event_category: detections
event_data:
{"connection_id":1730233,"detection_time":1742028574,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":18708,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9699f855-002e-41d6-a440-6ede3f84b39a
log_level: critical
event_category: detections
event_data:
{"connection_id":1730271,"detection_time":1742028580,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":8955,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7f2748f8-ff77-4ff3-bacb-c7e68f90e8c7
log_level: critical
event_category: detections
event_data:
{"connection_id":1731047,"detection_time":1742028689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":53589,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c6020b43-565b-4701-a006-969ce5a4211a
log_level: critical
event_category: detections
event_data:
{"connection_id":1731115,"detection_time":1742028696,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":44438,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a9fb78dd-39f8-4336-b07d-17192f1bb873
log_level: critical
event_category: detections
event_data:
{"connection_id":1731163,"detection_time":1742028702,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":35190,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 17c4b2e2-26d7-4b62-b543-b704b1e5ed50
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742029037,"event_type_id":6,"status":"blocked"}


event_id: a1bbeb45-b6ee-4138-806f-84e019c45136
log_level: critical
event_category: detections
event_data:
{"connection_id":1733631,"detection_time":1742029038,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43887,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98114846-8584-47d7-840e-10d5ddb8a7d4
log_level: critical
event_category: detections
event_data:
{"connection_id":1735837,"detection_time":1742029331,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":17562,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5e1397b-3f48-4207-9478-0c06d78d6b21
log_level: critical
event_category: detections
event_data:
{"connection_id":1735888,"detection_time":1742029337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":7483,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0e8963da-c8c3-4925-ae99-a1894bf3efa3
log_level: critical
event_category: detections
event_data:
{"connection_id":1735936,"detection_time":1742029344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":55495,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e1e8de89-1d0d-484e-8e3e-812070a80d93
log_level: critical
event_category: detections
event_data:
{"connection_id":1736173,"detection_time":1742029373,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":52209,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 364bfc7a-280f-416b-86b3-58c2af7e0580
log_level: critical
event_category: detections
event_data:
{"connection_id":1736226,"detection_time":1742029379,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":40499,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ffc0355e-6b6e-4f76-88ba-b8c2512307f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1736273,"detection_time":1742029385,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":28241,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5678ee73-b78a-4626-939c-e0236274c04d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742029524,"event_type_id":6,"status":"blocked"}


event_id: 10a00566-631a-4c6f-9e41-a7857a16ef4d
log_level: critical
event_category: detections
event_data:
{"connection_id":1737387,"detection_time":1742029524,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42661,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 177ab1d7-bea7-4037-baa0-24c40090b0d0
log_level: critical
event_category: detections
event_data:
{"connection_id":1738032,"detection_time":1742029611,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":11312,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c2d90f4-f79c-4f9c-ab99-41a5a0f050c2
log_level: critical
event_category: detections
event_data:
{"connection_id":1738075,"detection_time":1742029617,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":2223,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b6774b7a-6a74-4f19-be32-df4ade4603a2
log_level: critical
event_category: detections
event_data:
{"connection_id":1738136,"detection_time":1742029624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":51741,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee945272-ca16-4d62-bf0e-137453fed9ab
log_level: critical
event_category: detections
event_data:
{"connection_id":1741747,"detection_time":1742030114,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":58214,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f4bb9e93-4e36-46ec-809b-aeb1b96a748b
log_level: critical
event_category: detections
event_data:
{"connection_id":1741796,"detection_time":1742030121,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":41219,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ed4a2b65-7446-42f1-97e8-454264fb8b12
log_level: critical
event_category: detections
event_data:
{"connection_id":1741845,"detection_time":1742030127,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":25585,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 67b67b77-1d8d-4c5b-9026-d1012a953c86
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742030496,"event_type_id":6,"status":"blocked"}


event_id: a2a4c2c8-4750-4dc6-9d4f-fbc2c900011c
log_level: critical
event_category: detections
event_data:
{"connection_id":1744621,"detection_time":1742030496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40563,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b773f1cf-602e-4ee9-93b6-4bd8745b54db
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742030678,"event_type_id":6,"status":"blocked"}


event_id: 6cf92771-9ccf-46e2-9dfe-8b38d5489849
log_level: critical
event_category: detections
event_data:
{"connection_id":1745946,"detection_time":1742030678,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42611,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f44a8a41-0c4f-495c-82e6-3ee0f040e802
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742030986,"event_type_id":6,"status":"blocked"}


event_id: d8727872-40f9-47d7-90f6-f3dcc7cbe31f
log_level: critical
event_category: detections
event_data:
{"connection_id":1748692,"detection_time":1742030986,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39204,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a85b373-2e7f-4914-8955-d5c0d4830a7e
log_level: critical
event_category: detections
event_data:
{"connection_id":1749305,"detection_time":1742031062,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":39104,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 88c1c976-f425-444b-9280-5aec9e21be3d
log_level: critical
event_category: detections
event_data:
{"connection_id":1749359,"detection_time":1742031068,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":30720,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8db4b9e2-4f66-4418-a307-2bf3e9f7947a
log_level: critical
event_category: detections
event_data:
{"connection_id":1749416,"detection_time":1742031075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":22851,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0ff8b9b2-6511-49a5-83dc-1ce0b448f915
log_level: critical
event_category: detections
event_data:
{"connection_id":1749502,"detection_time":1742031086,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":59975,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2d573885-9a5d-404f-9c00-f6528e5a6c1c
log_level: critical
event_category: detections
event_data:
{"connection_id":1749575,"detection_time":1742031093,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":51865,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98f01882-695a-481d-8eb6-2cda6ed2584f
log_level: critical
event_category: detections
event_data:
{"connection_id":1749611,"detection_time":1742031099,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":43461,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1da1b619-d9ef-4753-a2e7-e37e558034d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742031181,"event_type_id":6,"status":"blocked"}


event_id: b2d9eb6d-7dab-4278-b185-80ddd9adf47a
log_level: critical
event_category: detections
event_data:
{"connection_id":1750272,"detection_time":1742031181,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51876,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88c3bbce-3317-49ce-a6f8-69fc9c81b5ed
log_level: critical
event_category: detections
event_data:
{"connection_id":1750435,"detection_time":1742031203,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"185.170.144.3","remote_port":63553,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86e3b3ba-c5ea-4491-8f97-44903be90258
log_level: critical
event_category: detections
event_data:
{"connection_id":1750779,"detection_time":1742031245,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":14816,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6bfb73ce-715d-43a4-a045-89850cfd5610
log_level: critical
event_category: detections
event_data:
{"connection_id":1750845,"detection_time":1742031252,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":7052,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 326a41e7-c4f3-43d3-90b1-79a0c0b3db51
log_level: critical
event_category: detections
event_data:
{"connection_id":1750900,"detection_time":1742031258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":57322,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bf00376c-7a9c-4963-997f-84e8f27418f7
log_level: critical
event_category: detections
event_data:
{"connection_id":1753201,"detection_time":1742031563,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":24330,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 76912906-cb4c-4e6a-a27f-8d5b5fd4588a
log_level: critical
event_category: detections
event_data:
{"connection_id":1753243,"detection_time":1742031569,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":57190,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 27d31708-6025-45e5-94ad-05f9f801e2bd
log_level: critical
event_category: detections
event_data:
{"connection_id":1753890,"detection_time":1742031660,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":2232,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0c62d890-167c-48e3-a960-ee56b10aeb47
log_level: critical
event_category: detections
event_data:
{"connection_id":1753953,"detection_time":1742031667,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":51897,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7ec23bea-0c28-462f-8b60-d5c2e43fb512
log_level: critical
event_category: detections
event_data:
{"connection_id":1753996,"detection_time":1742031673,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":43827,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7f71a026-bc5f-4a6f-adc1-3fdd0f6d75b0
log_level: critical
event_category: detections
event_data:
{"connection_id":1755493,"detection_time":1742031870,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":8855,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e3a31c15-56d6-4f33-ae58-3db7770139ca
log_level: critical
event_category: detections
event_data:
{"connection_id":1755552,"detection_time":1742031876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":2799,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 995a1d36-8415-4ec4-abdd-041d5db0c996
log_level: critical
event_category: detections
event_data:
{"connection_id":1755597,"detection_time":1742031883,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":54634,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6ed01916-5f20-4034-9471-b9d59bd721f6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742031956,"event_type_id":6,"status":"blocked"}


event_id: 6b1f73a8-4c76-4960-b152-05d4ab16ad12
log_level: critical
event_category: detections
event_data:
{"connection_id":1756140,"detection_time":1742031956,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35841,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: afd7132c-d21e-4156-9553-50c0f20b2ad9
log_level: critical
event_category: detections
event_data:
{"connection_id":1756431,"detection_time":1742031995,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":35301,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 10b69b7d-a71e-4a1a-a7b4-8b6c1ad2dfb8
log_level: critical
event_category: detections
event_data:
{"connection_id":1756484,"detection_time":1742032002,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":26374,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 841ee591-e868-4581-9bbd-9f1888a7d7c0
log_level: critical
event_category: detections
event_data:
{"connection_id":1756529,"detection_time":1742032008,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":16232,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 04d4e3d9-8155-49c5-b50d-7c001a0fa19f
log_level: critical
event_category: detections
event_data:
{"connection_id":1757316,"detection_time":1742032113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":59348,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 36bb9375-b706-4c83-ba22-c44e43754015
log_level: critical
event_category: detections
event_data:
{"connection_id":1757363,"detection_time":1742032119,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":50903,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 01680ea5-90e4-41ff-a978-c1e651bbf12e
log_level: critical
event_category: detections
event_data:
{"connection_id":1757408,"detection_time":1742032126,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":41485,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 88f0a86f-3aec-4163-99e5-bc5a76ec8b91
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742032188,"event_type_id":6,"status":"blocked"}


event_id: b53ac276-ba63-457c-8ba1-647889e92906
log_level: critical
event_category: detections
event_data:
{"connection_id":1757941,"detection_time":1742032188,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42575,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aafd6738-b5ab-4987-81b6-88efc829dbc2
log_level: critical
event_category: detections
event_data:
{"connection_id":1758487,"detection_time":1742032260,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":6027,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 70598206-8f1a-4f5e-887b-fe793018d83b
log_level: critical
event_category: detections
event_data:
{"connection_id":1758559,"detection_time":1742032267,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":55865,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 950d38e2-cf81-4a22-8815-63f4b6fbf74d
log_level: critical
event_category: detections
event_data:
{"connection_id":1758601,"detection_time":1742032273,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":46702,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 96795088-ca24-4546-a55b-8fd9adc5247b
log_level: critical
event_category: detections
event_data:
{"connection_id":1759633,"detection_time":1742032416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":25713,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 036269e9-558c-40a6-baeb-14091de1b357
log_level: critical
event_category: detections
event_data:
{"connection_id":1759640,"detection_time":1742032417,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":46331,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7aba062-db5b-4645-9004-efa488784495
log_level: critical
event_category: detections
event_data:
{"connection_id":1759689,"detection_time":1742032423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":16640,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3a026487-ad6f-49ff-a30d-c7087d0038b9
log_level: critical
event_category: detections
event_data:
{"connection_id":1759699,"detection_time":1742032424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":38350,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c60593d7-3b5e-43f9-b408-8440195a013e
log_level: critical
event_category: detections
event_data:
{"connection_id":1759749,"detection_time":1742032429,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":7483,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6d645ab4-33ec-4cc1-bffb-9e57c2079438
log_level: critical
event_category: detections
event_data:
{"connection_id":1759754,"detection_time":1742032430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":30264,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4c887c55-5f5d-4ae5-ae2e-087fa546b11a
log_level: critical
event_category: detections
event_data:
{"connection_id":1761011,"detection_time":1742032600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":51021,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6ac64ce0-5978-4d89-b164-8bf57aa3f4ae
log_level: critical
event_category: detections
event_data:
{"connection_id":1761060,"detection_time":1742032606,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":42887,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cf5d0b36-cad2-467b-ac24-be6eef663329
log_level: critical
event_category: detections
event_data:
{"connection_id":1761099,"detection_time":1742032613,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":36132,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2dc32af1-eee3-4c2b-8d67-4327a21e8257
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742032691,"event_type_id":6,"status":"blocked"}


event_id: bc21e694-4bef-4708-b319-36c78905671d
log_level: critical
event_category: detections
event_data:
{"connection_id":1761689,"detection_time":1742032691,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3b5a0a0c-2923-4522-abbe-28d51aee83e6
log_level: critical
event_category: detections
event_data:
{"connection_id":1764256,"detection_time":1742033005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":19334,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f6f73d1c-8547-4ca4-a485-2b13cf542b6e
log_level: critical
event_category: detections
event_data:
{"connection_id":1764313,"detection_time":1742033012,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":11805,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3a0b00ae-b7ec-4d55-a96c-b5227a62648e
log_level: critical
event_category: detections
event_data:
{"connection_id":1764368,"detection_time":1742033018,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":3081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85ca95c7-df5b-4efd-90c1-b246cdd83342
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742033198,"event_type_id":6,"status":"blocked"}


event_id: 39ccc906-9dad-45bb-8036-6624ffc1e194
log_level: critical
event_category: detections
event_data:
{"connection_id":1765760,"detection_time":1742033198,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":32854,"status":"detected","threat_name":"RDP:BruteForce"}


