# intrusion_prevention

event_id: 91ac133f-69e6-4385-8669-ccec56135910
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533666,"event_type_id":6,"status":"blocked"}


event_id: ef4bdd94-170a-4ba2-a9ec-73cb4414d523
log_level: critical
event_category: detections
event_data:
{"connection_id":5471651,"detection_time":1742533666,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":62080,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf2d436b-df2a-472f-beb4-b1cc63e5a887
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533667,"event_type_id":6,"status":"blocked"}


event_id: 9890c7ef-9679-481e-bfb7-5d397fe9fad4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471696,"detection_time":1742533667,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":58366,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0c6a1231-6b86-469b-8a01-e2ff738ed051
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533668,"event_type_id":6,"status":"blocked"}


event_id: 8ddc500f-9b6c-4cd3-b982-fe3d16d31c12
log_level: critical
event_category: detections
event_data:
{"connection_id":5471697,"detection_time":1742533668,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":60115,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3310442d-350a-4cb7-9e72-99e7fa1e0347
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533668,"event_type_id":6,"status":"blocked"}


event_id: ff5a558e-4415-4d87-85dc-c353e7b04664
log_level: critical
event_category: detections
event_data:
{"connection_id":5471699,"detection_time":1742533668,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55764,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44de5ac0-ff31-45de-8f23-b7ea21511f1a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471701,"detection_time":1742533668,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57552,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3246446d-2417-4a32-903d-a0ce7d9140cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533669,"event_type_id":6,"status":"blocked"}


event_id: 4f79bbb2-32e9-40cc-bb58-59be35e7a72c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471705,"detection_time":1742533669,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58665,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b4416113-0bf5-498c-a9a4-bb7ef4eeabd1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533669,"event_type_id":6,"status":"blocked"}


event_id: 79584c2d-d435-4726-8457-ddf7911b5065
log_level: critical
event_category: detections
event_data:
{"connection_id":5471708,"detection_time":1742533669,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":42224,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b688e233-6e5b-4b59-9ce3-03387dc3c2ae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533669,"event_type_id":6,"status":"blocked"}


event_id: 2913e204-cf82-4758-a7b3-68a35e7354b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5471709,"detection_time":1742533669,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":14673,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 49c2fe05-31da-4ae2-a98d-1c544236ece1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533670,"event_type_id":6,"status":"blocked"}


event_id: 1cb5e184-e704-4b0b-a3af-0f6fde3b1663
log_level: critical
event_category: detections
event_data:
{"connection_id":5471712,"detection_time":1742533670,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":56776,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3237b5f-dcc6-451b-87c7-a003aabc7e98
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533670,"event_type_id":6,"status":"blocked"}


event_id: b0e3fc68-20cc-482f-acf3-fc5dff364c1d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471714,"detection_time":1742533670,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":17419,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d8d93f19-23bb-42a4-8a8a-da2b8a42d2b9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533670,"event_type_id":6,"status":"blocked"}


event_id: ac97091f-256a-4d69-9d54-4fc276c90bdc
log_level: critical
event_category: detections
event_data:
{"connection_id":5471728,"detection_time":1742533670,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":55444,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 67f41212-3859-4855-9a73-d4ec5fcce719
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533671,"event_type_id":6,"status":"blocked"}


event_id: dc1db722-0e63-4852-94ce-92a43a1f4349
log_level: critical
event_category: detections
event_data:
{"connection_id":5471721,"detection_time":1742533671,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":49539,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f747479-97f2-4778-8255-d02a60095a18
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533671,"event_type_id":6,"status":"blocked"}


event_id: 29b97e76-9f1e-4f62-8212-a3dd014ee2c8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471719,"detection_time":1742533671,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54156,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: faa1e8b2-3629-4576-8f8a-255d85a682dd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533671,"event_type_id":6,"status":"blocked"}


event_id: 3c226415-b2f8-4412-919f-a7d9abf41366
log_level: critical
event_category: detections
event_data:
{"connection_id":5471723,"detection_time":1742533671,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8559,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: caa77ac9-5264-488b-9fb9-52547e69ae19
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533672,"event_type_id":6,"status":"blocked"}


event_id: 4f170228-c1f2-4f94-86a2-e23111419fd9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471738,"detection_time":1742533672,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":50690,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aba8cdd7-42bf-4a40-9c31-da35383c0753
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533672,"event_type_id":6,"status":"blocked"}


event_id: 0d0cdb62-8987-4e78-81c3-f224eabb9594
log_level: critical
event_category: detections
event_data:
{"connection_id":5471735,"detection_time":1742533672,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":12617,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a666e492-9035-4b18-89e5-8abf4c2b0c95
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533675,"event_type_id":6,"status":"blocked"}


event_id: 9b11cda4-a981-477c-a43d-9082e14ea8a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5471748,"detection_time":1742533675,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":64414,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a611cc1-1269-4b57-abc6-368aef28b27a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533675,"event_type_id":6,"status":"blocked"}


event_id: 1bc70167-2874-4801-a637-55fbc5088be4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471749,"detection_time":1742533675,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61123,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c6b2a9e-ba0a-4152-a3bd-0072bdffcb8c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471755,"detection_time":1742533675,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":3028,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9f8a557f-6ac6-44f8-860c-e6adfc4482a5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533676,"event_type_id":6,"status":"blocked"}


event_id: 0132c9e8-d0a9-4d06-abc9-6af1a5997fe5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471756,"detection_time":1742533676,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62433,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f0e95cee-efa2-4916-83a0-08b5e4b542ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533676,"event_type_id":6,"status":"blocked"}


event_id: af6ce1f9-9abc-4d67-ab6a-1d269c1f2dfa
log_level: critical
event_category: detections
event_data:
{"connection_id":5471761,"detection_time":1742533676,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":28743,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ff5b8e02-f948-481a-9bfc-be1f8d8c1a2f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533677,"event_type_id":6,"status":"blocked"}


event_id: 0906c2dc-686c-4057-a7e8-bb3e65e128e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5471765,"detection_time":1742533677,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51024,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e7687a37-24ad-4296-ba9a-d8c1c6f1c50a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533678,"event_type_id":6,"status":"blocked"}


event_id: f944e9fa-d29c-42ed-b429-2aaa9fa873dd
log_level: critical
event_category: detections
event_data:
{"connection_id":5471769,"detection_time":1742533678,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":50917,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4dd06a79-4691-48d6-b235-572770cd760d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533678,"event_type_id":6,"status":"blocked"}


event_id: c60aae0f-d4f0-4790-b6cc-eb54725493c8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471744,"detection_time":1742533678,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":27564,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 511c903e-3704-46f5-882f-815c8447458d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533679,"event_type_id":6,"status":"blocked"}


event_id: f0bd1277-4618-4c60-b01a-caa28d19b13a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471767,"detection_time":1742533679,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48680,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b189fb60-9be6-4050-ba80-609e06574db6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533680,"event_type_id":6,"status":"blocked"}


event_id: bdaa7451-111d-4183-a6e1-8eb5c4ddf08a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471773,"detection_time":1742533680,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52647,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3be5bccf-c3e0-41f0-b42f-ae2583fbb11f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533680,"event_type_id":6,"status":"blocked"}


event_id: 9113742d-bea1-47fd-af82-aa1edbdbe1e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5471753,"detection_time":1742533680,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":28350,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e452da88-23db-477b-aa5e-115073e2e2d8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471774,"detection_time":1742533680,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53705,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6fa65cc3-aef7-4f2c-bb6c-650bb50df41c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471776,"detection_time":1742533680,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54899,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 64c79592-56ce-439e-ac1d-0ef884703f5f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533682,"event_type_id":6,"status":"blocked"}


event_id: 4e1c9a7a-7343-4571-b995-2cda2f088b51
log_level: critical
event_category: detections
event_data:
{"connection_id":5471797,"detection_time":1742533682,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58082,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a10f4219-af16-4868-a18b-a04b5242591f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533682,"event_type_id":6,"status":"blocked"}


event_id: 4693b7c4-2811-46c8-9651-6cc7d40fab40
log_level: critical
event_category: detections
event_data:
{"connection_id":5471792,"detection_time":1742533682,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":48091,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7d499367-3eac-47a2-b8ba-3aa4de40c718
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533683,"event_type_id":6,"status":"blocked"}


event_id: 8ad61ba8-9f16-4360-bb71-a918d65f0b81
log_level: critical
event_category: detections
event_data:
{"connection_id":5471794,"detection_time":1742533683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0ff9c52e-5015-47c4-adf7-beecc93765ef
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533683,"event_type_id":6,"status":"blocked"}


event_id: ea246130-6748-4ab3-8ade-1dc59414e2ee
log_level: critical
event_category: detections
event_data:
{"connection_id":5471796,"detection_time":1742533683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":29569,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0c9888e6-d856-41e2-b7a2-6385dcd01ccf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533683,"event_type_id":6,"status":"blocked"}


event_id: 05de18d0-4a49-4526-805e-5295e10e9249
log_level: critical
event_category: detections
event_data:
{"connection_id":5471799,"detection_time":1742533683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":64879,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e3aba201-ab35-49b6-b868-91d15c31a942
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533683,"event_type_id":6,"status":"blocked"}


event_id: 15a1a27d-5bfe-4264-be68-b8130a999db8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471806,"detection_time":1742533683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46954,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 163cfec9-41ff-46d8-8cf7-f033385ca968
log_level: critical
event_category: detections
event_data:
{"connection_id":5471810,"detection_time":1742533683,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":32243,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0c19ec78-ba8e-41f7-90f0-abf2e31b48ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533684,"event_type_id":6,"status":"blocked"}


event_id: 78a6564c-afd6-4121-9d20-ea2aa435b911
log_level: critical
event_category: detections
event_data:
{"connection_id":5471821,"detection_time":1742533684,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":62938,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a17c5ad-fe2e-4457-ade8-866d70a39191
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533684,"event_type_id":6,"status":"blocked"}


event_id: 35a55c73-9bf1-428e-9350-c494b5dd2532
log_level: critical
event_category: detections
event_data:
{"connection_id":5471813,"detection_time":1742533684,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39255,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e2170777-f5c4-4c01-8f3b-dd0dcccb82dc
log_level: critical
event_category: detections
event_data:
{"connection_id":5471814,"detection_time":1742533684,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39384,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 19ef7f75-99dc-46f7-bfe6-90b90d369bcb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533684,"event_type_id":6,"status":"blocked"}


event_id: c413ec29-89b9-4c17-af97-c3fd2b5d265f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471828,"detection_time":1742533684,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":58373,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 49644190-ac29-41f6-b5a4-ada26eb149f6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533685,"event_type_id":6,"status":"blocked"}


event_id: daceed97-e6da-4b4a-8e7d-fc136c564cf6
log_level: critical
event_category: detections
event_data:
{"connection_id":5471815,"detection_time":1742533685,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39489,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b70c786f-07e6-43d5-a899-18b53b5832c3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533685,"event_type_id":6,"status":"blocked"}


event_id: 1986b172-bb33-4f8b-9a71-9b2d259d00db
log_level: critical
event_category: detections
event_data:
{"connection_id":5471823,"detection_time":1742533685,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":8617,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 78486008-ae41-417f-b178-4b60797cb324
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533685,"event_type_id":6,"status":"blocked"}


event_id: c3fb5bd5-793f-43fd-b2ce-8cb47dc8cfe5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471826,"detection_time":1742533685,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":38659,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9f907bf3-9b59-4104-a679-fd9c69a946a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533686,"event_type_id":6,"status":"blocked"}


event_id: 56631a8d-d5cd-42f5-9acd-eb0495f19d6d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471837,"detection_time":1742533686,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":12860,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d2975df2-02c7-47aa-8228-ca3f9f03f02a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533686,"event_type_id":6,"status":"blocked"}


event_id: e1a6e9c5-35f0-428f-91b0-2d2037067ab8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471848,"detection_time":1742533686,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58525,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 72d328c3-46c9-4a84-a6e5-b439baf289cc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533687,"event_type_id":6,"status":"blocked"}


event_id: 90b17772-9d6b-4e24-aef8-7f4b427e2093
log_level: critical
event_category: detections
event_data:
{"connection_id":5471840,"detection_time":1742533687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":65143,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c3c7adf1-2e6e-4c5a-84f9-b20e0ec93751
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533687,"event_type_id":6,"status":"blocked"}


event_id: bc74ee0a-4553-47dc-ae25-b199e669b6fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5471843,"detection_time":1742533687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57382,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98638c8d-54a1-42a4-91c4-9a24900b270a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471849,"detection_time":1742533687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":2858,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4c8e8c4a-62c8-4aa1-b658-03076515f35e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533689,"event_type_id":6,"status":"blocked"}


event_id: 52637840-b239-4b0e-a4d1-0d26a2b6dbb9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471874,"detection_time":1742533689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52344,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aee1b930-af0b-48eb-8db1-3dcbdd5c567c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533689,"event_type_id":6,"status":"blocked"}


event_id: 9ec0b3f0-f532-4022-9bbb-c0a32e01552a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471891,"detection_time":1742533689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51398,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9e8fcc37-0036-4bfc-b4f7-3b7208a0f1ca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533689,"event_type_id":6,"status":"blocked"}


event_id: fc17df04-9878-4484-a8b1-2811a80c1018
log_level: critical
event_category: detections
event_data:
{"connection_id":5471883,"detection_time":1742533689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":11111,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fcb4eccb-7c88-4c3c-8cbb-d50e08359443
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533690,"event_type_id":6,"status":"blocked"}


event_id: 0d0de568-9250-4db9-b33e-da2e8fb69856
log_level: critical
event_category: detections
event_data:
{"connection_id":5471856,"detection_time":1742533690,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":63275,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c4f43da9-3af6-4edc-ae12-7760e6736e41
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533691,"event_type_id":6,"status":"blocked"}


event_id: 4ed641ed-4b1b-4087-9e31-7b7651e13442
log_level: critical
event_category: detections
event_data:
{"connection_id":5471898,"detection_time":1742533691,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":29638,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d153de1f-9df9-4270-ae90-5e1f3179d71a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533691,"event_type_id":6,"status":"blocked"}


event_id: 69d5d3c6-2010-49d7-b541-0ffa88a7131e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471902,"detection_time":1742533691,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":61188,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ef9a87b4-c396-46db-80b3-b804c8a5cb42
log_level: critical
event_category: detections
event_data:
{"connection_id":5471905,"detection_time":1742533691,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":32558,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a4b02407-56cd-449e-9c06-c657de614389
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533692,"event_type_id":6,"status":"blocked"}


event_id: 28e24cc9-566e-4345-b66e-fb686a52632c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471909,"detection_time":1742533692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64891,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb64a89a-7ee9-44a8-baa1-0bd0bcac0e10
log_level: critical
event_category: detections
event_data:
{"connection_id":5471911,"detection_time":1742533692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50299,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c42a68a-3fb6-41cc-856c-f2268b2009b0
log_level: critical
event_category: detections
event_data:
{"connection_id":5471912,"detection_time":1742533692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51488,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9498f25b-c8d7-4f51-8d84-fe36c8428b0e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533693,"event_type_id":6,"status":"blocked"}


event_id: 56eb4b88-2de6-4735-bc0f-cf698f120244
log_level: critical
event_category: detections
event_data:
{"connection_id":5471923,"detection_time":1742533693,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":38380,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a8eb5168-b34e-47fc-bd6b-6eb1010416b6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533693,"event_type_id":6,"status":"blocked"}


event_id: 169d2ae1-678a-4e8e-8f9b-ba94580d5770
log_level: critical
event_category: detections
event_data:
{"connection_id":5471928,"detection_time":1742533693,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":25997,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 266d816e-2ae8-4e9e-9cf3-b1cd889c444a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533694,"event_type_id":6,"status":"blocked"}


event_id: 8f3c476d-b4db-4648-ac4d-d01ca14575cd
log_level: critical
event_category: detections
event_data:
{"connection_id":5471929,"detection_time":1742533694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":5547,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e480fc17-5905-433a-8cbc-50ffe3d465df
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533694,"event_type_id":6,"status":"blocked"}


event_id: ffaf8d5a-5b19-49bf-a3b1-a723e6d892cb
log_level: critical
event_category: detections
event_data:
{"connection_id":5471940,"detection_time":1742533694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58976,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dced035f-c5ba-4b3a-9820-586b596d036c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533695,"event_type_id":6,"status":"blocked"}


event_id: f4ae27a1-73b6-4d09-9d8f-8644fa5d3751
log_level: critical
event_category: detections
event_data:
{"connection_id":5471936,"detection_time":1742533695,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63102,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f3c57c30-d1cd-4628-90e9-cc383ed5b1ca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533697,"event_type_id":6,"status":"blocked"}


event_id: d82aa06e-e10a-43fb-b5d3-62033f9260f9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471954,"detection_time":1742533697,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15982,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82e356cb-d851-4852-8f66-a90974f239ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533697,"event_type_id":6,"status":"blocked"}


event_id: 9a134531-9102-42b1-9228-5b85ecb4266a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471956,"detection_time":1742533697,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":38733,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 64b8d559-f647-44ac-9504-67b5ff59061a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471959,"detection_time":1742533697,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":40239,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 739780c5-6a8f-40d6-ba49-77c92d103a3e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533698,"event_type_id":6,"status":"blocked"}


event_id: a176d43f-2fb0-4d30-8891-62c45f4aeaac
log_level: critical
event_category: detections
event_data:
{"connection_id":5471971,"detection_time":1742533698,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":23040,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 07b1fa17-6337-4309-8c32-a3cbe92e0b4e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533699,"event_type_id":6,"status":"blocked"}


event_id: 63f16578-998b-4232-a387-e92a1c0d474f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471982,"detection_time":1742533699,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":61334,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 321e9834-17a2-4f4b-aff6-4b1c60d166e4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533699,"event_type_id":6,"status":"blocked"}


event_id: d4407e60-25f4-4317-a283-a6ef3693aad8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471973,"detection_time":1742533699,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":59682,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d19db95e-896b-4448-a3b6-ee33f1054d50
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533699,"event_type_id":6,"status":"blocked"}


event_id: aad96c20-5b9a-4156-826c-774363c29e7b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471974,"detection_time":1742533699,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53261,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c22d5642-d18c-454b-b391-51adacb42bd2
log_level: critical
event_category: detections
event_data:
{"connection_id":5471976,"detection_time":1742533699,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54486,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fb3a32d1-6bb6-4b82-b144-33e5a494b3ca
log_level: critical
event_category: detections
event_data:
{"connection_id":5471980,"detection_time":1742533699,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62585,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cad16fb1-dc56-4d89-a512-192a187989bc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533700,"event_type_id":6,"status":"blocked"}


event_id: 65ef68e7-8967-450e-989a-b30e644c6eb5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471989,"detection_time":1742533700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":29879,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 76e7656e-947b-40b5-958d-e0902887cc36
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533701,"event_type_id":6,"status":"blocked"}


event_id: 0cbe2dde-a1c4-4f53-b256-6093b99eb23c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471996,"detection_time":1742533701,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":53546,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0c4f22a6-0788-48d8-ae91-728176858afc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533702,"event_type_id":6,"status":"blocked"}


event_id: a4389a68-cc33-4291-815d-39c05070652d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472017,"detection_time":1742533702,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":57251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 64040738-5c22-42ca-8993-e166ed64fe3f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533702,"event_type_id":6,"status":"blocked"}


event_id: 75c6edba-0334-41af-9985-29f7e30ede7a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472010,"detection_time":1742533702,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":57545,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f66ef8fe-649a-4e3b-be69-c0dd9f30b8a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533702,"event_type_id":6,"status":"blocked"}


event_id: a18eb8c0-28d5-4c81-a983-dfc405909aa0
log_level: critical
event_category: detections
event_data:
{"connection_id":5472021,"detection_time":1742533702,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52523,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2dae01be-d01e-4fbf-a073-c1d7dde25bf0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533704,"event_type_id":6,"status":"blocked"}


event_id: a4ac75ac-89d1-471a-84b7-0d34e6a14135
log_level: critical
event_category: detections
event_data:
{"connection_id":5472025,"detection_time":1742533704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61395,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 01cbb36e-66fd-44b0-8c57-4775e321cd38
log_level: critical
event_category: detections
event_data:
{"connection_id":5472027,"detection_time":1742533704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62801,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eac3d53d-40cf-4a09-9ce1-b954c2b6ebad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533704,"event_type_id":6,"status":"blocked"}


event_id: 966a4860-e8d7-4026-8f91-66b90a74d76a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472042,"detection_time":1742533704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":64393,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82beb597-9df2-4635-90e3-717501942215
log_level: critical
event_category: detections
event_data:
{"connection_id":5472032,"detection_time":1742533704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64128,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f9550299-7f92-41b4-a9a8-bccb43782500
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533704,"event_type_id":6,"status":"blocked"}


event_id: 49fcfc78-2c79-45c5-8b49-d8b66718ece0
log_level: critical
event_category: detections
event_data:
{"connection_id":5472034,"detection_time":1742533704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":44927,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c077a4a1-fc2c-4226-861e-440662b9f726
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533705,"event_type_id":6,"status":"blocked"}


event_id: fca01c4a-d4a8-484b-b168-655870942623
log_level: critical
event_category: detections
event_data:
{"connection_id":5472043,"detection_time":1742533705,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":47918,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4763aa77-62b1-43f6-bdaf-6d6c877ef186
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533706,"event_type_id":6,"status":"blocked"}


event_id: 769ada8f-8525-4fee-b5e9-cff5e9b75e50
log_level: critical
event_category: detections
event_data:
{"connection_id":5472051,"detection_time":1742533706,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59481,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5f2d5c58-0c50-4fb7-b735-d50a78eb45a5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533706,"event_type_id":6,"status":"blocked"}


event_id: df355513-8776-416d-b912-b5c60f406f6b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472053,"detection_time":1742533706,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":9156,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f1e2f7c8-162d-498a-b1e5-678ab0510fbd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533707,"event_type_id":6,"status":"blocked"}


event_id: 62fc6e46-7e7e-4a89-9b82-4bda5bb7e873
log_level: critical
event_category: detections
event_data:
{"connection_id":5472059,"detection_time":1742533707,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":36460,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 438fc479-cb3e-4fe4-8a74-9d55e9f4084e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533708,"event_type_id":6,"status":"blocked"}


event_id: d7c54269-aa1d-45e5-9717-b92505071520
log_level: critical
event_category: detections
event_data:
{"connection_id":5472070,"detection_time":1742533708,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":28938,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 51a17374-b282-458f-8099-30c088dd8af6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533708,"event_type_id":6,"status":"blocked"}


event_id: 8e96355b-1f1b-4b32-8551-d731f9122917
log_level: critical
event_category: detections
event_data:
{"connection_id":5472069,"detection_time":1742533708,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58179,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e0194e50-e9ac-4d3b-9cf9-e87705e8f37c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533708,"event_type_id":6,"status":"blocked"}


event_id: 30597a9d-2143-4454-8f0d-378ee322d893
log_level: critical
event_category: detections
event_data:
{"connection_id":5472072,"detection_time":1742533708,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":41451,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bad3e9c9-f67e-42a5-9c2a-b415093c4bbf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533709,"event_type_id":6,"status":"blocked"}


event_id: 0bf74cd5-4940-44f2-a9c3-ad261c1fe4b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472075,"detection_time":1742533709,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":31298,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0272c7cf-babf-48e9-ba90-f39647657d9f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533711,"event_type_id":6,"status":"blocked"}


event_id: c49a313f-3567-4069-bee3-0260d1646269
log_level: critical
event_category: detections
event_data:
{"connection_id":5472091,"detection_time":1742533711,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49910,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9bececa8-b972-4592-884a-b5bbc15cc7a9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533711,"event_type_id":6,"status":"blocked"}


event_id: 880c5b9a-aa79-486d-b40e-36f977f809e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5472104,"detection_time":1742533711,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":58965,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8c3fc7a3-b40a-420d-a09b-1638c02bb96c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472094,"detection_time":1742533711,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51096,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 50dde6ee-9d96-4ad5-b85d-8663effd0b5a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533712,"event_type_id":6,"status":"blocked"}


event_id: 7ada2d10-5263-4749-b8d6-e403938d5d5f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472103,"detection_time":1742533712,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":28574,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 91f80f77-5303-4068-90f1-2ab5e15738c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533712,"event_type_id":6,"status":"blocked"}


event_id: 4b32b910-65a7-4aac-92d7-4317bb0a7b80
log_level: critical
event_category: detections
event_data:
{"connection_id":5472106,"detection_time":1742533712,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9971,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e33d7310-9b0b-4ae9-b869-c170005866d6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533712,"event_type_id":6,"status":"blocked"}


event_id: 46f6198b-a373-4db1-98b0-575e82243ac2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472107,"detection_time":1742533712,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":45237,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a6d3cba9-b47b-4287-bdcd-15a1c3b74436
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533713,"event_type_id":6,"status":"blocked"}


event_id: 28848381-0364-4003-91c7-8ac70f61dd77
log_level: critical
event_category: detections
event_data:
{"connection_id":5472117,"detection_time":1742533713,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":64252,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6bfa457d-a0a2-4e43-a364-5d1f142eed7e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533713,"event_type_id":6,"status":"blocked"}


event_id: 780900d8-85dd-4240-95ae-af1ec89fd8fa
log_level: critical
event_category: detections
event_data:
{"connection_id":5472112,"detection_time":1742533713,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":12535,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d9e7262-e50a-43a2-bad6-9dabe23b1192
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533714,"event_type_id":6,"status":"blocked"}


event_id: 1254a1c0-2c98-4a94-9e3a-56f43e4ccf30
log_level: critical
event_category: detections
event_data:
{"connection_id":5472123,"detection_time":1742533714,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":53268,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 96de0025-7dfd-4a42-b1a5-4450bd1a8e67
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533715,"event_type_id":6,"status":"blocked"}


event_id: 09b105bd-9f48-42ba-9451-8d3f4ac48882
log_level: critical
event_category: detections
event_data:
{"connection_id":5472125,"detection_time":1742533715,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":19020,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3dff810c-97e6-47d2-84a4-fc790c9d2aad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533715,"event_type_id":6,"status":"blocked"}


event_id: 9a27f32e-01ed-4994-9da4-6bec42e0c24a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472128,"detection_time":1742533715,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57864,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 350559f5-d53d-4694-8e5e-4149d3a36feb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533716,"event_type_id":6,"status":"blocked"}


event_id: 74402af2-4ba4-44f8-9e5d-10c480ab4be1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472131,"detection_time":1742533716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58961,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 22504672-dd14-4f76-89cf-c38742af6117
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533716,"event_type_id":6,"status":"blocked"}


event_id: 89f0243e-e43d-4fcf-8c07-df179d5bf650
log_level: critical
event_category: detections
event_data:
{"connection_id":5472134,"detection_time":1742533716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":57376,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f02146c3-77c2-4d40-b59f-922c28169648
log_level: critical
event_category: detections
event_data:
{"connection_id":5472136,"detection_time":1742533716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60237,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 452b3d77-605e-4f7d-89d2-e979cc928458
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533716,"event_type_id":6,"status":"blocked"}


event_id: 71a74ead-5461-4cc5-bf44-cb315c4f2bd9
log_level: critical
event_category: detections
event_data:
{"connection_id":5472143,"detection_time":1742533716,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":45233,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 89c5496f-02bc-43fd-8102-8f1ba7ad6cbb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533717,"event_type_id":6,"status":"blocked"}


event_id: db6449f2-b60a-4954-8903-b53d3a3c7070
log_level: critical
event_category: detections
event_data:
{"connection_id":5472146,"detection_time":1742533717,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":47583,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d713bafc-f732-40ee-ad69-0b4556cce928
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533718,"event_type_id":6,"status":"blocked"}


event_id: 0c3d4efb-c482-4946-9e3a-4f1d44c1a151
log_level: critical
event_category: detections
event_data:
{"connection_id":5472154,"detection_time":1742533718,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55557,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87ccf6ed-cb14-447a-b2fa-844f43873ab9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533719,"event_type_id":6,"status":"blocked"}


event_id: 9bd0e0d1-a01b-49ae-aa1a-d5a1ee32b134
log_level: critical
event_category: detections
event_data:
{"connection_id":5472163,"detection_time":1742533719,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":32930,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03b3d3b4-e503-441f-8648-03d6b1ca20ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533719,"event_type_id":6,"status":"blocked"}


event_id: 53f00428-f561-4ee9-bb35-f247c9893627
log_level: critical
event_category: detections
event_data:
{"connection_id":5472168,"detection_time":1742533719,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":1272,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 54da02d7-0a55-4592-941d-3e0decefe0ce
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533719,"event_type_id":6,"status":"blocked"}


event_id: 403b0337-9396-4369-9080-f0625b01f9f5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472167,"detection_time":1742533719,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":55443,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98ebcb28-827a-484e-b997-4a2f5d5a8572
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533719,"event_type_id":6,"status":"blocked"}


event_id: b8b41abc-c8e0-4640-ab52-264f88750b12
log_level: critical
event_category: detections
event_data:
{"connection_id":5472169,"detection_time":1742533719,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":56017,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f1f4ef5a-6c42-44da-af9f-d583448206dc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533720,"event_type_id":6,"status":"blocked"}


event_id: d23d6dd9-6c9c-46e5-b898-c59b609d642a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472177,"detection_time":1742533720,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":9960,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: be7ccd7f-e1e8-4e58-b1f5-37d7799d4ebb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533720,"event_type_id":6,"status":"blocked"}


event_id: 175b0dde-cf93-4bfb-b5f5-3eb1b01cfd83
log_level: critical
event_category: detections
event_data:
{"connection_id":5472175,"detection_time":1742533720,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":56760,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3774bb3f-aff3-4c75-8f68-0a71888f25f3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533721,"event_type_id":6,"status":"blocked"}


event_id: 9d5849b1-a3cc-477d-887d-f16deaf12fd0
log_level: critical
event_category: detections
event_data:
{"connection_id":5472181,"detection_time":1742533721,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":41748,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7f9afa82-18ea-4dab-b74a-c6caef5fa042
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533721,"event_type_id":6,"status":"blocked"}


event_id: 93d7a4a9-337d-479e-8339-415c7ef6c0c4
log_level: critical
event_category: detections
event_data:
{"connection_id":5472184,"detection_time":1742533721,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":13133,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2b601392-014a-467c-858a-0d0595d6a1ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533722,"event_type_id":6,"status":"blocked"}


event_id: ff502927-31a9-4066-b68e-14e3ac6c6fe1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472210,"detection_time":1742533722,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63762,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4c812a0b-af88-483a-bde6-0216232d6d25
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533723,"event_type_id":6,"status":"blocked"}


event_id: 897af05c-55f0-49d1-a2d9-d529d3fc2e00
log_level: critical
event_category: detections
event_data:
{"connection_id":5472202,"detection_time":1742533723,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":18770,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 16776d3c-3fb1-4c02-8f3a-fba336a23963
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533723,"event_type_id":6,"status":"blocked"}


event_id: e71eb5b8-badb-4e0a-ad36-e8611ff53968
log_level: critical
event_category: detections
event_data:
{"connection_id":5472201,"detection_time":1742533723,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62823,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a353ee15-3ee4-4ab0-8947-02553b51b952
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533723,"event_type_id":6,"status":"blocked"}


event_id: 282d4301-b097-4ee1-8941-dbde495c9099
log_level: critical
event_category: detections
event_data:
{"connection_id":5472214,"detection_time":1742533723,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":50362,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0734703f-d4ef-42b9-aa1a-527ddda136fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533723,"event_type_id":6,"status":"blocked"}


event_id: 82c9045f-47be-46f1-8e14-d806fbe6a8b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472222,"detection_time":1742533723,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":7181,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a670d75f-534e-458e-8b10-70c691ed901d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"199.27.221.21","autoblock_timeout":25,"detection_time":1742533724,"event_type_id":6,"status":"blocked"}


event_id: 38c1f459-6584-42fa-add3-8cfa6c108c4d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472233,"detection_time":1742533724,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"199.27.221.21","remote_port":65423,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b1e8239e-d995-403b-8273-b10f19a5ddf2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533724,"event_type_id":6,"status":"blocked"}


event_id: 3e908ee9-eab6-47b5-ae20-0c9fc6834f27
log_level: critical
event_category: detections
event_data:
{"connection_id":5472235,"detection_time":1742533724,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":50098,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6f95249f-564a-49b2-9c0d-f5faf3370a90
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533725,"event_type_id":6,"status":"blocked"}


event_id: 4211013b-d377-4235-acda-de6c2b8432e5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472206,"detection_time":1742533725,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":10599,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ea75ae5-5a06-412a-8d3a-b80cebc217bd
log_level: critical
event_category: detections
event_data:
{"connection_id":5472213,"detection_time":1742533725,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":16206,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dfa11e35-e700-4a3a-8415-ff2a19b514e5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533726,"event_type_id":6,"status":"blocked"}


event_id: f7c4e449-3fb9-4533-95e1-629ac664203f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472193,"detection_time":1742533726,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":10682,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f0759881-3e98-430c-a15e-1c59bd40a81b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472231,"detection_time":1742533726,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":22208,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2fa3478f-c61c-410b-a21b-d3fc4d3a1776
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533727,"event_type_id":6,"status":"blocked"}


event_id: 1358b5c2-2020-4acd-80e1-53a8722f7f2c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472268,"detection_time":1742533727,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":50961,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a5a866f9-c9b8-4f0f-baa2-7cabcc12c520
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533727,"event_type_id":6,"status":"blocked"}


event_id: a91ccc51-5c53-475f-9216-0ca40f780edd
log_level: critical
event_category: detections
event_data:
{"connection_id":5472245,"detection_time":1742533727,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19482,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 562f08d4-11bc-447e-909b-368239176d3f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533727,"event_type_id":6,"status":"blocked"}


event_id: 530dcd83-031d-4be3-9db5-6a818c813149
log_level: critical
event_category: detections
event_data:
{"connection_id":5472247,"detection_time":1742533727,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53885,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 48813a82-fee1-4dfd-9e6f-21f74461ab92
log_level: critical
event_category: detections
event_data:
{"connection_id":5472249,"detection_time":1742533727,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":20787,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d7b4403d-86d9-4a0d-8728-9828eb761f1b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533728,"event_type_id":6,"status":"blocked"}


event_id: 4779557d-b06e-40de-a3ba-ad3a333aea9b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472253,"detection_time":1742533728,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55695,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8d9fa252-918a-4ae9-b6dc-ba96b5e6f57d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472261,"detection_time":1742533728,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56958,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cf6af2ac-aed1-4b5d-8d5c-3fa63b68b55e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533728,"event_type_id":6,"status":"blocked"}


event_id: 190fb4c9-ebf9-4bdc-9814-255d10ccba4d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472281,"detection_time":1742533728,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42831,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 635a8ad5-3fb1-408f-8cc6-5121364f0b77
log_level: critical
event_category: detections
event_data:
{"connection_id":5472273,"detection_time":1742533728,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":40221,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5290edd3-41cc-47a5-b75f-e4e3edaebcff
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533729,"event_type_id":6,"status":"blocked"}


event_id: db24fd3b-12d0-44bc-a5aa-2d30c2cf9df2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472284,"detection_time":1742533729,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":3436,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c7344e63-3f31-4246-8a65-93677f94d0d2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533730,"event_type_id":6,"status":"blocked"}


event_id: 4f85ab8f-4b97-4c13-b117-cfebaa320af9
log_level: critical
event_category: detections
event_data:
{"connection_id":5472290,"detection_time":1742533730,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":10251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f3653fe-2ff3-4c75-8789-f667cfa0637a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533730,"event_type_id":6,"status":"blocked"}


event_id: 515a58ed-b5c7-4665-97de-2297013384c8
log_level: critical
event_category: detections
event_data:
{"connection_id":5472289,"detection_time":1742533730,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 76c04395-94b5-4a84-ace7-6b7876bc9c45
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533731,"event_type_id":6,"status":"blocked"}


event_id: 70cd9d44-dc8d-4f32-8cea-a31fdf341785
log_level: critical
event_category: detections
event_data:
{"connection_id":5472300,"detection_time":1742533731,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":33840,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 056829d8-ddde-498e-b599-d78399c77381
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533732,"event_type_id":6,"status":"blocked"}


event_id: cc320a6e-fe47-413e-9cad-de81ad344b01
log_level: critical
event_category: detections
event_data:
{"connection_id":5472308,"detection_time":1742533732,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":32183,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4af8f3f4-2862-4d42-b0ba-7f1b96736e20
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533732,"event_type_id":6,"status":"blocked"}


event_id: 546a52fb-5080-49c2-9f1b-db2268a4ca9d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472310,"detection_time":1742533732,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":37767,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ae9cc6e-7949-4b6c-9e2c-ab36b2212124
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533732,"event_type_id":6,"status":"blocked"}


event_id: 58bb3ec5-0b08-4d2c-b89d-3908119cb47b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472312,"detection_time":1742533732,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":56064,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e103de4b-d4f4-42e1-899f-de0e1b939e16
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533733,"event_type_id":6,"status":"blocked"}


event_id: 03d1ef59-eba7-4058-8ce8-28c9028c0b23
log_level: critical
event_category: detections
event_data:
{"connection_id":5472321,"detection_time":1742533733,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":57313,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 61256451-61c5-4438-9f57-3e9b1b389975
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533734,"event_type_id":6,"status":"blocked"}


event_id: 924cf574-9501-4d03-acac-0b17beb9b052
log_level: critical
event_category: detections
event_data:
{"connection_id":5472328,"detection_time":1742533734,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":25186,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 030b7955-a753-4bac-8660-aa3fdc254f86
log_level: critical
event_category: detections
event_data:
{"connection_id":5472349,"detection_time":1742533734,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":25882,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: accbc7c1-0365-47c3-bf9b-6d9f07ec3f10
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533734,"event_type_id":6,"status":"blocked"}


event_id: ca8d51ef-45ed-40f2-8f97-3a7ecc56a0d5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472335,"detection_time":1742533734,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58845,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3b0336f5-1b9e-4fda-ac9b-d291cee26972
log_level: critical
event_category: detections
event_data:
{"connection_id":5472339,"detection_time":1742533734,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":28124,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6f258282-4960-458d-8c92-3f72f10bed20
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533735,"event_type_id":6,"status":"blocked"}


event_id: 0432a286-ee6e-437d-9701-8a1bb4d459bc
log_level: critical
event_category: detections
event_data:
{"connection_id":5472340,"detection_time":1742533735,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb0d3381-f676-4f5c-a8cb-98b546803bfc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533736,"event_type_id":6,"status":"blocked"}


event_id: 86be1923-d88a-46dc-8cba-173a21fe827a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472357,"detection_time":1742533736,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":53871,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bd58164a-eae6-47e2-ad27-c7a092cddb14
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533737,"event_type_id":6,"status":"blocked"}


event_id: f2a6a47d-a968-43b2-a6be-960e3fd92828
log_level: critical
event_category: detections
event_data:
{"connection_id":5472346,"detection_time":1742533737,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":42021,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8eded32e-03a9-4d3a-a077-41fe8c84cdd8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533737,"event_type_id":6,"status":"blocked"}


event_id: 24a33e95-4707-4f51-956a-6358b4766f24
log_level: critical
event_category: detections
event_data:
{"connection_id":5472367,"detection_time":1742533737,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":9168,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7ec5c850-08c5-4d41-84ff-a46e2ce7db06
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533738,"event_type_id":6,"status":"blocked"}


event_id: 30c4733f-0440-4d3c-9235-58919982df9d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472373,"detection_time":1742533738,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":11358,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fd905772-8d4d-4cdb-b5f1-6b4bd2900d28
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533739,"event_type_id":6,"status":"blocked"}


event_id: 107be9e6-6f2e-4c2e-b43e-9159b955d616
log_level: critical
event_category: detections
event_data:
{"connection_id":5472378,"detection_time":1742533739,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0629206a-b2df-430a-bf8f-72817db16aca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533739,"event_type_id":6,"status":"blocked"}


event_id: 48cb9583-7182-4f6a-a9e4-6f5d5d0bdce3
log_level: critical
event_category: detections
event_data:
{"connection_id":5472395,"detection_time":1742533739,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":54690,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0766fd1c-8e64-4cc8-9d81-996db652cf37
log_level: critical
event_category: detections
event_data:
{"connection_id":5472383,"detection_time":1742533739,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51385,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5968536a-062f-4e05-855f-d680937f959e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472386,"detection_time":1742533739,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52807,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a804917-ce03-40d2-8fd0-026aabdfea53
log_level: critical
event_category: detections
event_data:
{"connection_id":5472411,"detection_time":1742533740,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":49316,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6fa4a5ba-1ed8-46c5-830e-5a2afc34e908
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533741,"event_type_id":6,"status":"blocked"}


event_id: 82a7528f-ce8b-435c-ac4e-dc7a675f7c78
log_level: critical
event_category: detections
event_data:
{"connection_id":5472417,"detection_time":1742533741,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":53879,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4e38522a-e71f-4bcb-b62e-7b29943653f3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533742,"event_type_id":6,"status":"blocked"}


event_id: b2e6464a-dda5-4a88-bcfb-97da36a32782
log_level: critical
event_category: detections
event_data:
{"connection_id":5472412,"detection_time":1742533742,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8764,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3b0ab472-55a3-4f14-b961-6d7f4a57abd2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533742,"event_type_id":6,"status":"blocked"}


event_id: 725b66b3-af40-450a-998b-f3e87383add1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472410,"detection_time":1742533742,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64766,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 303d617a-33c4-42f5-9088-a831faf67245
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533742,"event_type_id":6,"status":"blocked"}


event_id: ab294f6a-9501-46a6-b6c5-40a9f7795c1a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472416,"detection_time":1742533742,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":54783,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a67bde34-4175-4a50-af1f-dff1904d7b3d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533742,"event_type_id":6,"status":"blocked"}


event_id: 152bf172-ebd6-47c3-8a2b-6057d00efa75
log_level: critical
event_category: detections
event_data:
{"connection_id":5472418,"detection_time":1742533742,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":25567,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9616c224-9260-41cb-ba5f-65f6e7dfe92b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472424,"detection_time":1742533742,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":57219,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: da0d71c0-9820-4af2-8eba-eb4a20c0b273
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533743,"event_type_id":6,"status":"blocked"}


event_id: 74f5ed08-3da4-4856-b132-582590723803
log_level: critical
event_category: detections
event_data:
{"connection_id":5472430,"detection_time":1742533743,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":58841,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8bb7f362-d1bc-4ce3-b194-ff1051c58ec2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533744,"event_type_id":6,"status":"blocked"}


event_id: afd5275b-bbd2-4977-97ee-ac54fa564279
log_level: critical
event_category: detections
event_data:
{"connection_id":5472436,"detection_time":1742533744,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":33392,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b71de35-73bb-4cc6-aa00-2ae73c5911c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533744,"event_type_id":6,"status":"blocked"}


event_id: a34d1327-c654-48ca-ad46-7550dd30268b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472435,"detection_time":1742533744,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49192,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c898c56-2c0b-4e8e-8dde-9ffb6ac735c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533744,"event_type_id":6,"status":"blocked"}


event_id: 45f46ea0-acb3-4cda-ac82-a0ae2e21d37d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472439,"detection_time":1742533744,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":63783,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 86e1db3c-db91-4ac8-9832-029529f36649
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533744,"event_type_id":6,"status":"blocked"}


event_id: 0c7b9dba-1cf3-434d-a1b3-e773eb49e9f7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472440,"detection_time":1742533744,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":55552,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df7127b9-636c-46c6-841f-ba69b73bb97e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533745,"event_type_id":6,"status":"blocked"}


event_id: b475e865-3a32-490e-ba76-37abc6229c3d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472446,"detection_time":1742533745,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":51915,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 287957af-f926-4460-a261-c533ebe30ac7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533745,"event_type_id":6,"status":"blocked"}


event_id: 60dc1df7-d254-48cc-9c37-26b8ceb5f631
log_level: critical
event_category: detections
event_data:
{"connection_id":5472442,"detection_time":1742533745,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":37674,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 649ff19a-61f0-4749-adb6-24d4e207f376
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533746,"event_type_id":6,"status":"blocked"}


event_id: 29cf82e9-44f3-4a8d-9709-0fe789bdf76e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472449,"detection_time":1742533746,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":25275,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 68dbe913-0558-4a3c-8e3f-02e49bba35c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533746,"event_type_id":6,"status":"blocked"}


event_id: 03807f1d-64f0-4e76-9ddf-36016379eae9
log_level: critical
event_category: detections
event_data:
{"connection_id":5472448,"detection_time":1742533746,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55176,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88cfe797-504f-4704-bae3-3cf35935d62b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533747,"event_type_id":6,"status":"blocked"}


event_id: 96d2f826-4a86-4a49-a24e-7030a4d606fb
log_level: critical
event_category: detections
event_data:
{"connection_id":5472451,"detection_time":1742533747,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56498,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b51bb4d4-76ea-473f-b755-1a1a42f66db9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533747,"event_type_id":6,"status":"blocked"}


event_id: 0d0e5990-c987-4ff5-a9e5-d83dc21e2633
log_level: critical
event_category: detections
event_data:
{"connection_id":5472453,"detection_time":1742533747,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58693,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8ef253c4-20f2-43cf-bc25-622d113c19c4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533747,"event_type_id":6,"status":"blocked"}


event_id: 4f31f79f-ec29-4111-879a-8723d74219e6
log_level: critical
event_category: detections
event_data:
{"connection_id":5472455,"detection_time":1742533747,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":27956,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 46e26fce-6e20-4ad1-9701-09f5a56d6fe4
log_level: critical
event_category: detections
event_data:
{"connection_id":5472459,"detection_time":1742533747,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":13344,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3857afce-28ce-48b4-bc28-95a10c75e627
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533748,"event_type_id":6,"status":"blocked"}


event_id: a1c5af0d-7e53-436a-9f1f-fee2cf555856
log_level: critical
event_category: detections
event_data:
{"connection_id":5472460,"detection_time":1742533748,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13303,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5e3a5186-da2b-4998-b795-3e03c5547b01
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533749,"event_type_id":6,"status":"blocked"}


event_id: 59adb91e-5f8b-4773-acaf-964e7b9c976c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472464,"detection_time":1742533749,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":36326,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 198849dd-23d2-4934-941b-2af916d14034
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533750,"event_type_id":6,"status":"blocked"}


event_id: 6524ebee-fc41-4817-b54c-82783c12049d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472465,"detection_time":1742533750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":54765,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 52d80def-bce4-4d08-bbac-1c7aedecd345
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"202.165.25.140","autoblock_timeout":25,"detection_time":1742533750,"event_type_id":6,"status":"blocked"}


event_id: 7001223e-25f3-4c62-a07c-3b6930f56c5e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472476,"detection_time":1742533750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"202.165.25.140","remote_port":52294,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b7ade39f-1594-46a9-b591-efe7f275599f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533750,"event_type_id":6,"status":"blocked"}


event_id: 400c8a4e-ebbd-43fb-be21-84bd9be286fe
log_level: critical
event_category: detections
event_data:
{"connection_id":5472471,"detection_time":1742533750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21876,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 89adb71c-9c67-4903-8f49-75f75afc0713
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533750,"event_type_id":6,"status":"blocked"}


event_id: f0c78e4d-5071-4c41-9010-b4981dea5e9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472470,"detection_time":1742533750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":52222,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 383ec0f0-da56-41aa-9e02-2bfa8d81b099
log_level: critical
event_category: detections
event_data:
{"connection_id":5472472,"detection_time":1742533750,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":58105,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5577ebc6-b19a-4380-b169-0b0dfbdf170e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533751,"event_type_id":6,"status":"blocked"}


event_id: 6c2bd6f8-eda7-4d9b-8214-39c9c84d0bc5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472474,"detection_time":1742533751,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63869,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 694402f6-7c8c-4697-995d-2c1edb217f54
log_level: critical
event_category: detections
event_data:
{"connection_id":5472473,"detection_time":1742533751,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62801,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4ab603c9-dc48-4023-990b-94c62648d043
log_level: critical
event_category: detections
event_data:
{"connection_id":5472477,"detection_time":1742533751,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65062,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a97c2988-c7e9-455a-b8cb-f9002f4d08b4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533752,"event_type_id":6,"status":"blocked"}


event_id: 2cc725f2-6fbf-4df5-8b66-e76b4a123a20
log_level: critical
event_category: detections
event_data:
{"connection_id":5472481,"detection_time":1742533752,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":63756,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 843c8c6e-ba76-4537-8676-f73975eb606e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533752,"event_type_id":6,"status":"blocked"}


event_id: c043a88e-234f-4e55-9d0a-82e0f8e52220
log_level: critical
event_category: detections
event_data:
{"connection_id":5472485,"detection_time":1742533752,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":30645,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4876790e-bc5d-4f07-b86c-5d4741ef7af7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533753,"event_type_id":6,"status":"blocked"}


event_id: 723ad260-e521-4ac7-b9d1-cbb7cca71815
log_level: critical
event_category: detections
event_data:
{"connection_id":5472486,"detection_time":1742533753,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":51789,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3013437f-06c3-4b3e-aefa-4219c56b51b7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533753,"event_type_id":6,"status":"blocked"}


event_id: a7921210-3a4b-4f92-937b-f5f85d08a5f9
log_level: critical
event_category: detections
event_data:
{"connection_id":5472487,"detection_time":1742533753,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60518,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 68e6a3bf-aef0-42f4-b036-560852d1d42d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533754,"event_type_id":6,"status":"blocked"}


event_id: a2f22fe4-ac22-4c74-bfea-cb855ff63958
log_level: critical
event_category: detections
event_data:
{"connection_id":5472493,"detection_time":1742533754,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":27418,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a1245b1d-94e3-4552-85ec-29ac3fd3fd99
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533755,"event_type_id":6,"status":"blocked"}


event_id: fb749769-8c9b-4fcf-9fa7-72a5377abc68
log_level: critical
event_category: detections
event_data:
{"connection_id":5472495,"detection_time":1742533755,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":56829,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 84066a7b-de78-4a7b-8ed8-f5cf408d2c14
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533757,"event_type_id":6,"status":"blocked"}


event_id: 337ba9b3-3a20-4960-943d-712e74bf6e33
log_level: critical
event_category: detections
event_data:
{"connection_id":5472499,"detection_time":1742533757,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":64676,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ab67165c-e4eb-4449-8e0e-217c029de3be
log_level: critical
event_category: detections
event_data:
{"connection_id":5472501,"detection_time":1742533757,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":65435,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4832d180-4310-4514-b287-8cf903f58136
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533757,"event_type_id":6,"status":"blocked"}


event_id: ec2fb6dc-4ee7-4758-aa43-2bf884cdfb32
log_level: critical
event_category: detections
event_data:
{"connection_id":5472512,"detection_time":1742533757,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23344,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 029e5b3a-65e3-4dd5-b08e-17fc92abbb3c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533757,"event_type_id":6,"status":"blocked"}


event_id: 96bbba06-c12f-424d-9ac0-4bf98b7c489b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472502,"detection_time":1742533757,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":31990,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e4f5a0c4-0683-4aaa-9cf8-7f68727602ef
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533758,"event_type_id":6,"status":"blocked"}


event_id: 918cbf1b-6e21-4e65-8ed4-40c6b270ae02
log_level: critical
event_category: detections
event_data:
{"connection_id":5472504,"detection_time":1742533758,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":48519,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6053a480-a953-4771-aa69-8c8336a55759
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533758,"event_type_id":6,"status":"blocked"}


event_id: 6bbce518-854f-4d20-9d59-2e5e3891c42e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472508,"detection_time":1742533758,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":20860,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4e6a42ac-33ba-47ac-818c-829080d7907b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533758,"event_type_id":6,"status":"blocked"}


event_id: 003b7fea-581f-4a46-9a83-d3b346eee808
log_level: critical
event_category: detections
event_data:
{"connection_id":5472506,"detection_time":1742533758,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":56863,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6ec8daae-bd11-4e5b-b82f-a8fb0f7432ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533758,"event_type_id":6,"status":"blocked"}


event_id: 8aaaf90d-18f9-4ee2-9745-09415d272adc
log_level: critical
event_category: detections
event_data:
{"connection_id":5472509,"detection_time":1742533758,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51259,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a4a494d-c44c-4890-9981-8cbca26a295e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472511,"detection_time":1742533758,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52709,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 890ebadc-af0a-49c9-867f-5a3110ace3b6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533759,"event_type_id":6,"status":"blocked"}


event_id: a00f179c-495a-4fca-9b01-8e578f3a8050
log_level: critical
event_category: detections
event_data:
{"connection_id":5472518,"detection_time":1742533759,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58658,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9571c755-5919-4e37-b7f0-958c5aed012d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533759,"event_type_id":6,"status":"blocked"}


event_id: fc1364d8-02c0-4559-afff-d79809e8b36d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472521,"detection_time":1742533759,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":55158,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 35f887a9-1c2a-47d5-ac8b-8bd05a3b1988
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533760,"event_type_id":6,"status":"blocked"}


event_id: 34423919-083a-4c6f-8459-8399e1942758
log_level: critical
event_category: detections
event_data:
{"connection_id":5472524,"detection_time":1742533760,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":40544,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e73f2540-84a9-41fe-93e1-4a3487679f5a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472525,"detection_time":1742533760,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":41866,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0acec947-a280-4377-96d1-21e613064daf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533761,"event_type_id":6,"status":"blocked"}


event_id: 426aeb46-b0c7-4909-918e-64c1ad137ee2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472526,"detection_time":1742533761,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14271,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a2dc44af-deed-4bfd-b07d-4fff651db299
log_level: critical
event_category: detections
event_data:
{"connection_id":5472529,"detection_time":1742533761,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":18075,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e3443137-a4d9-495b-8f9c-2c4135b855e8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533763,"event_type_id":6,"status":"blocked"}


event_id: e45bebbb-b695-4228-8914-70af9014322a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472531,"detection_time":1742533763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58743,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a40567a3-b3a2-4d2c-8b86-6eeb510f8ec4
log_level: critical
event_category: detections
event_data:
{"connection_id":5472533,"detection_time":1742533763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60344,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 10aee80a-088f-4956-81dc-49f0b0ec6cab
log_level: critical
event_category: detections
event_data:
{"connection_id":5472542,"detection_time":1742533763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":17083,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 25de6029-a07d-472b-8b9b-17c4e272d2c3
log_level: critical
event_category: detections
event_data:
{"connection_id":5472534,"detection_time":1742533763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61448,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 347e6642-6753-4cf0-a331-e515200a699a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533763,"event_type_id":6,"status":"blocked"}


event_id: b6c11075-34e5-431d-bb22-e1254653edb2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472536,"detection_time":1742533763,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":5378,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b11f9cc-eb6b-4430-a668-c51e8a17325e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533764,"event_type_id":6,"status":"blocked"}


event_id: f4b3d047-6166-415c-9901-b062a2f10b23
log_level: critical
event_category: detections
event_data:
{"connection_id":5472540,"detection_time":1742533764,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":8033,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e2e46846-25ee-4523-8e93-697fe400471d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533765,"event_type_id":6,"status":"blocked"}


event_id: 5095e0ff-48ee-48e3-b6a6-db1d9541cad5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472549,"detection_time":1742533765,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":53449,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f0ef4fe0-e070-4d0a-a53a-fa2a15cfd6c1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533765,"event_type_id":6,"status":"blocked"}


event_id: d7d8bf99-6dc7-40c2-8787-0b2ee974c973
log_level: critical
event_category: detections
event_data:
{"connection_id":5472547,"detection_time":1742533765,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56956,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2d0d762e-21aa-4456-acc1-507748a88a03
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533766,"event_type_id":6,"status":"blocked"}


event_id: b51757e1-136c-402c-ab0e-1642ac157278
log_level: critical
event_category: detections
event_data:
{"connection_id":5472548,"detection_time":1742533766,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":34378,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88ad3bc2-cfbb-471b-8437-7803e7329cca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533767,"event_type_id":6,"status":"blocked"}


event_id: cd1669b8-3a46-45e6-9040-166494436642
log_level: critical
event_category: detections
event_data:
{"connection_id":5472561,"detection_time":1742533767,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":53876,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fc8dc4c7-248d-4521-bf79-c25b3edd855b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472570,"detection_time":1742533767,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":56094,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66fd21f0-cdda-4adb-ad0c-1c0224d39ba8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533769,"event_type_id":6,"status":"blocked"}


event_id: 9c9fa87a-a2a9-4302-a136-4df0207064b7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472582,"detection_time":1742533769,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":59769,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2890fddb-341d-4aa7-863e-8434a52445a4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533770,"event_type_id":6,"status":"blocked"}


event_id: dca520e8-30f8-4ef0-992f-5c99c799d751
log_level: critical
event_category: detections
event_data:
{"connection_id":5472580,"detection_time":1742533770,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63724,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b8a5b5ec-043a-4386-9bf4-f982b4fd5db4
log_level: critical
event_category: detections
event_data:
{"connection_id":5472583,"detection_time":1742533770,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64902,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2a2209e8-05cf-42a6-b2a8-6224c96f5800
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533771,"event_type_id":6,"status":"blocked"}


event_id: fb04b4bb-091f-4d0e-a438-55284f3eb0dc
log_level: critical
event_category: detections
event_data:
{"connection_id":5472588,"detection_time":1742533771,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6074,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 449a70b3-dd3a-4a83-a128-1a598ed5df0c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533771,"event_type_id":6,"status":"blocked"}


event_id: 84cd99d3-f310-4f50-8704-da6b72db660e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472589,"detection_time":1742533771,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":53418,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bdb56db7-0c9e-48db-8194-f46f88f449c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533771,"event_type_id":6,"status":"blocked"}


event_id: 0e3a1ad0-a927-4443-a9b1-d61c26d37d78
log_level: critical
event_category: detections
event_data:
{"connection_id":5472594,"detection_time":1742533771,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58794,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7213721-f6b2-4b5b-9201-ad446130d255
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533771,"event_type_id":6,"status":"blocked"}


event_id: 3621d086-cd06-4cc3-9838-a2d7f2c0f1b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472590,"detection_time":1742533771,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":35745,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5e053c94-a31e-4395-8e2d-b23bafa608ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533772,"event_type_id":6,"status":"blocked"}


event_id: fdc5f72a-d79a-4730-8b57-581d7a6ba729
log_level: critical
event_category: detections
event_data:
{"connection_id":5472591,"detection_time":1742533772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":57871,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a5a7a222-12f3-43da-89a9-008b373e3e2b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533772,"event_type_id":6,"status":"blocked"}


event_id: bda54f85-f814-49ad-a68d-2bf78551e48f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472592,"detection_time":1742533772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":37386,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 368d2802-ef01-40e2-af6f-b242984680b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533772,"event_type_id":6,"status":"blocked"}


event_id: 4f074600-73ba-4410-8978-eb3ce71584bb
log_level: critical
event_category: detections
event_data:
{"connection_id":5472576,"detection_time":1742533772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":1644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aaf64f50-38f6-4f20-a1c3-180e5bdc2c40
log_level: critical
event_category: detections
event_data:
{"connection_id":5472577,"detection_time":1742533772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":1663,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f947cdcc-b979-4472-8482-749c36c85134
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533773,"event_type_id":6,"status":"blocked"}


event_id: b1a99ea4-bee5-4591-b398-2fe4c0262805
log_level: critical
event_category: detections
event_data:
{"connection_id":5472569,"detection_time":1742533773,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":59899,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d384eddb-4b69-4b66-bba0-27a6b9a34012
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533773,"event_type_id":6,"status":"blocked"}


event_id: a8a1acac-d22a-44c3-91db-006e34f76cf1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472603,"detection_time":1742533773,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":13309,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 689223a8-8c58-40b7-a34c-fdb3c5deb3d8
log_level: critical
event_category: detections
event_data:
{"connection_id":5472615,"detection_time":1742533773,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":52371,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 58fb39f2-e405-486e-9ec1-c21565ee0d12
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533774,"event_type_id":6,"status":"blocked"}


event_id: e3d4c57d-ebad-450a-9a50-0b0055cafaae
log_level: critical
event_category: detections
event_data:
{"connection_id":5472605,"detection_time":1742533774,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":43879,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 212b486e-f23e-42e8-9eb4-b3bc1a12e5d9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533774,"event_type_id":6,"status":"blocked"}


event_id: 7bd8e528-e040-4a22-969f-09301c39ce33
log_level: critical
event_category: detections
event_data:
{"connection_id":5472610,"detection_time":1742533774,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55110,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8650aa23-afbf-4329-8432-6dd35800003d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533774,"event_type_id":6,"status":"blocked"}


event_id: 2c642cc7-812b-4831-ace3-bb9cde0e3e3e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472620,"detection_time":1742533774,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":62158,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 10139233-2a87-40b0-9b05-6d557fdd5556
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533774,"event_type_id":6,"status":"blocked"}


event_id: 54edf19b-9b27-4f8e-aed4-f92300423cc3
log_level: critical
event_category: detections
event_data:
{"connection_id":5472614,"detection_time":1742533774,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":17693,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1746c4bb-3242-4ad3-8beb-4e5b49e132f9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533775,"event_type_id":6,"status":"blocked"}


event_id: 732c6ca0-8898-4686-b78e-f9cb1bb3a8d6
log_level: critical
event_category: detections
event_data:
{"connection_id":5472616,"detection_time":1742533775,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56571,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5dea909d-b11b-426b-8eef-e4d1167cf71e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472617,"detection_time":1742533775,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57689,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a376be07-9fea-4134-88e9-6596a922ee51
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533776,"event_type_id":6,"status":"blocked"}


event_id: c5deb2e1-2210-4606-8a11-5545a5952c4c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472622,"detection_time":1742533776,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":5765,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc7c87ec-b8cc-4e98-bf11-2a497cc8e709
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533777,"event_type_id":6,"status":"blocked"}


event_id: 72f721c1-b18c-46e9-8618-a5481572f753
log_level: critical
event_category: detections
event_data:
{"connection_id":5472623,"detection_time":1742533777,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8468,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8c9ef869-f79d-4d32-a3c2-4163c5adcd4a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533777,"event_type_id":6,"status":"blocked"}


event_id: 818b9ad4-4bbe-4972-a430-6bb49b12be4a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472624,"detection_time":1742533777,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53354,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ecaca756-0fab-45c1-81bc-5414d705f1e8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533778,"event_type_id":6,"status":"blocked"}


event_id: f0767677-b0df-412c-b496-810a3b9004c2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472629,"detection_time":1742533778,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":58539,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 05139d78-3910-443f-8b2e-3359bce909e3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533779,"event_type_id":6,"status":"blocked"}


event_id: c9c99f1a-7bb1-4755-b8e1-2a6ff869a5db
log_level: critical
event_category: detections
event_data:
{"connection_id":5472637,"detection_time":1742533779,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":35210,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b5448d93-0f6e-4d3a-88c9-2db2238b6267
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533779,"event_type_id":6,"status":"blocked"}


event_id: 9c97d0a1-942b-4651-9a71-a7a742cb5d9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472636,"detection_time":1742533779,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":17353,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 29ce9d23-2163-4233-bf77-1236b198940f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533780,"event_type_id":6,"status":"blocked"}


event_id: f5d000ba-2bf3-450e-9e20-49c489a37984
log_level: critical
event_category: detections
event_data:
{"connection_id":5472642,"detection_time":1742533780,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":38706,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7bc3c91f-cf62-44b1-9e83-732da9c76335
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533780,"event_type_id":6,"status":"blocked"}


event_id: 6c7f6bba-0a58-4cb7-bb1b-c1809156074f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472643,"detection_time":1742533780,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":2557,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f9b00c89-119a-4340-8f2d-47f83221ed69
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533781,"event_type_id":6,"status":"blocked"}


event_id: b57fa3bb-3c02-444e-adb5-76d8c36a4cbb
log_level: critical
event_category: detections
event_data:
{"connection_id":5472650,"detection_time":1742533781,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61478,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dbc87781-8d87-47cd-b7ef-29d07409bfdc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533781,"event_type_id":6,"status":"blocked"}


event_id: 40509207-04b4-4447-8aa3-e6c727f0de29
log_level: critical
event_category: detections
event_data:
{"connection_id":5472647,"detection_time":1742533781,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":43892,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f567b2d-cf2e-4f70-ba28-f2e751af9e61
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533782,"event_type_id":6,"status":"blocked"}


event_id: 9249a142-dd15-459a-99b4-5d838e659505
log_level: critical
event_category: detections
event_data:
{"connection_id":5472648,"detection_time":1742533782,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59977,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58d57e87-8376-47fc-8752-100278c8c2ea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533782,"event_type_id":6,"status":"blocked"}


event_id: 7d2a60ff-c14b-4626-975e-a7c0e90f7391
log_level: critical
event_category: detections
event_data:
{"connection_id":5472654,"detection_time":1742533782,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":10687,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3751eed-de1b-4889-ad47-ba311708d3fe
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533783,"event_type_id":6,"status":"blocked"}


event_id: 5a71407f-979d-4826-990e-e2b943a00f65
log_level: critical
event_category: detections
event_data:
{"connection_id":5472657,"detection_time":1742533783,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":32798,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7366e3b0-68a4-4658-8249-715e2f1a4676
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533783,"event_type_id":6,"status":"blocked"}


event_id: ced64a68-e33c-4bba-bde2-35522c9f950c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472662,"detection_time":1742533783,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":62723,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 20f2f92d-7770-4400-8563-ecd35157b148
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533783,"event_type_id":6,"status":"blocked"}


event_id: 62ae2296-0cc1-4e25-b2c2-a04604b7ee75
log_level: critical
event_category: detections
event_data:
{"connection_id":5472660,"detection_time":1742533783,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":31736,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ee51611f-85c4-4109-b361-25436774201b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472641,"detection_time":1742533783,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":25018,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a707cf81-9bc9-4760-817f-c904763e0717
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533784,"event_type_id":6,"status":"blocked"}


event_id: bc10cd72-c0c1-4590-81e1-c13e260e2f5b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472639,"detection_time":1742533784,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":18173,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: adccb76c-3436-415d-8e75-09a4c93ca374
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533784,"event_type_id":6,"status":"blocked"}


event_id: 2cf9e6a2-341a-49ba-a482-c2fedf9367f4
log_level: critical
event_category: detections
event_data:
{"connection_id":5472664,"detection_time":1742533784,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58422,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f56f81be-f7e7-478f-9369-39e7d7cc7019
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533786,"event_type_id":6,"status":"blocked"}


event_id: f956e151-64e6-441c-b3b1-5523a1a9490d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472673,"detection_time":1742533786,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":54693,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e511a72e-649e-4309-afe9-3d2bcf487932
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533786,"event_type_id":6,"status":"blocked"}


event_id: 9e3b5eeb-d0d2-4b1e-8eee-98f560fa0447
log_level: critical
event_category: detections
event_data:
{"connection_id":5472666,"detection_time":1742533786,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59907,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1dd30fcb-3e8e-4781-9065-ee851b627dd7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533786,"event_type_id":6,"status":"blocked"}


event_id: a978e744-e026-4b02-ba31-da53f7052ee4
log_level: critical
event_category: detections
event_data:
{"connection_id":5472671,"detection_time":1742533786,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51200,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 78b4e714-1777-4f0c-8506-66d3435425ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5472672,"detection_time":1742533786,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52807,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 55437ed0-d3c3-4e10-aa7b-a870dd6c4400
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533787,"event_type_id":6,"status":"blocked"}


event_id: 8fe1da8b-72ce-4c13-a82f-cba051485ce1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472675,"detection_time":1742533787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":44951,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cbc9006f-b1e8-4c86-a349-d31341025953
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533787,"event_type_id":6,"status":"blocked"}


event_id: 055ea1f0-1320-45e1-873c-6c6094f3daf1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472684,"detection_time":1742533787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3723,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1f67c1f6-2998-4818-a0d1-91b7e28a4a80
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533787,"event_type_id":6,"status":"blocked"}


event_id: 742a28ef-6b70-481b-9f03-811db820c354
log_level: critical
event_category: detections
event_data:
{"connection_id":5472674,"detection_time":1742533787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53711,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f4fbc18e-388e-448e-945b-6ec79a48db1f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472676,"detection_time":1742533787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":45944,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3ee19c2-3869-4205-a5a7-fa04a9baa692
log_level: critical
event_category: detections
event_data:
{"connection_id":5472678,"detection_time":1742533787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":1048,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 93a9b7cc-d3b6-44fa-b12a-89f80847046a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533787,"event_type_id":6,"status":"blocked"}


event_id: ea3bf8e9-8be8-4436-86e3-ed867dba85c5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472681,"detection_time":1742533787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":29213,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 85efa7c4-076a-4fbc-9366-08e7237fcbe3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533789,"event_type_id":6,"status":"blocked"}


event_id: 3bc7a7dc-50d8-4a12-b30f-1595543e01a0
log_level: critical
event_category: detections
event_data:
{"connection_id":5472686,"detection_time":1742533789,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49452,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 59933b88-ae7c-45f5-826b-bc0c3cd2612c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533789,"event_type_id":6,"status":"blocked"}


event_id: 966236a4-b03b-45cd-9435-06376356f6da
log_level: critical
event_category: detections
event_data:
{"connection_id":5472688,"detection_time":1742533789,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":35455,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c089c6e-d9ec-4d51-b443-2bf0069b7306
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533790,"event_type_id":6,"status":"blocked"}


event_id: 3fd3b10c-0ae6-4a49-b8a9-9b42f310ee4e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472690,"detection_time":1742533790,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":58953,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a09c5a6-4703-4e0c-86ba-f35279bd26c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533791,"event_type_id":6,"status":"blocked"}


event_id: c48ce2b0-e698-4036-bbb0-f365086019f5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472701,"detection_time":1742533791,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":62740,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ccbef6b-fef4-49d8-999b-38f5341738b6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533793,"event_type_id":6,"status":"blocked"}


event_id: fce8271b-016d-4c9e-ab68-7d67442198d1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472708,"detection_time":1742533793,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":50000,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 659b8194-1667-4362-8fd8-176ec02d4f8e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533793,"event_type_id":6,"status":"blocked"}


event_id: 3a44e065-d26b-4e77-82ca-aec7c8d60da7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472710,"detection_time":1742533793,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56320,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c148434a-f4a2-4e3d-b1d1-6c285cf507ef
log_level: critical
event_category: detections
event_data:
{"connection_id":5472712,"detection_time":1742533793,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52282,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 90673bd0-b5dd-4764-95f8-82efb8ac36cb
log_level: critical
event_category: detections
event_data:
{"connection_id":5472711,"detection_time":1742533794,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57402,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d594401f-e552-4483-9976-7cf51951685e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533796,"event_type_id":6,"status":"blocked"}


event_id: 022c6ffa-029a-4a1d-815d-61d8ab01e9be
log_level: critical
event_category: detections
event_data:
{"connection_id":5472723,"detection_time":1742533796,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14379,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5021c213-8b89-4c81-b9c6-ef0bcd02a6b6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533796,"event_type_id":6,"status":"blocked"}


event_id: 24f5ad95-afaa-4913-9dde-e12cbdd84b32
log_level: critical
event_category: detections
event_data:
{"connection_id":5472733,"detection_time":1742533796,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":36213,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ace4e3a-2bb8-482f-9ca9-f3efbc59676b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472727,"detection_time":1742533796,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":33853,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c3922be9-7ece-4248-b21a-fd39a95af54b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533796,"event_type_id":6,"status":"blocked"}


event_id: ac99c3b9-b3fb-4b47-8780-6d6c627d0cc8
log_level: critical
event_category: detections
event_data:
{"connection_id":5472730,"detection_time":1742533796,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58144,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 95132fd4-9937-4b16-bef8-407b2fff3497
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533797,"event_type_id":6,"status":"blocked"}


event_id: 77858930-d8a2-4914-8064-f5b68abf7579
log_level: critical
event_category: detections
event_data:
{"connection_id":5472741,"detection_time":1742533797,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":49317,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 248cd57d-3ea9-4a0c-9a51-cf10491f3228
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533798,"event_type_id":6,"status":"blocked"}


event_id: b9c9ac59-a069-496b-ae1e-850c8229a1be
log_level: critical
event_category: detections
event_data:
{"connection_id":5472738,"detection_time":1742533798,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60152,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0dcf95b5-6511-4a69-9bdf-b565e4ab638a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533798,"event_type_id":6,"status":"blocked"}


event_id: 5e76c41b-7015-476e-aba6-c4c53afd9f75
log_level: critical
event_category: detections
event_data:
{"connection_id":5472739,"detection_time":1742533798,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2431587d-3563-4164-8be8-3d808c61baf6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533798,"event_type_id":6,"status":"blocked"}


event_id: 1bdb973c-9ab0-498f-9bad-c53d3b4abaf1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472749,"detection_time":1742533798,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":65016,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca11acad-2627-499e-8fa6-f39d642cc2d2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472743,"detection_time":1742533798,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65385,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a3f7f1b6-b691-4a82-9cdb-73bab897426a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533799,"event_type_id":6,"status":"blocked"}


event_id: 12f8a020-de9e-48bd-bc82-17d6bd72da75
log_level: critical
event_category: detections
event_data:
{"connection_id":5472745,"detection_time":1742533799,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50458,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 59286d44-6adf-490d-a8e7-643d4db3f461
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533801,"event_type_id":6,"status":"blocked"}


event_id: f565db56-5b10-4bde-bbd4-1a0ed9515c82
log_level: critical
event_category: detections
event_data:
{"connection_id":5472758,"detection_time":1742533801,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":51030,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 819dfec3-f6e5-4c08-bdf7-3a6faf272c1a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533801,"event_type_id":6,"status":"blocked"}


event_id: c1e9a3e4-a7f5-4586-b4ec-55023f5a11a6
log_level: critical
event_category: detections
event_data:
{"connection_id":5472755,"detection_time":1742533801,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61941,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f17e9de9-ac6b-496d-8793-236e37495250
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533801,"event_type_id":6,"status":"blocked"}


event_id: db12eee3-b558-4015-80e2-19eccae3f16e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472764,"detection_time":1742533801,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":59843,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 399c91ef-1feb-4b67-a8d2-78fbea2aadcc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533801,"event_type_id":6,"status":"blocked"}


event_id: 8263db71-6edb-4920-973a-9d1e9df0c414
log_level: critical
event_category: detections
event_data:
{"connection_id":5472759,"detection_time":1742533801,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":16493,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca771b92-ebca-4d19-915c-4e272e209192
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533801,"event_type_id":6,"status":"blocked"}


event_id: 810eb860-09c7-4450-b944-d70bda47963b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472760,"detection_time":1742533801,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":34020,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 14a06440-a3ba-47e1-8507-c1bb88aa3a14
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533802,"event_type_id":6,"status":"blocked"}


event_id: 0c78a932-17a0-4aa1-afc7-0de54040b111
log_level: critical
event_category: detections
event_data:
{"connection_id":5472762,"detection_time":1742533802,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":17698,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3c6bab02-089a-42fc-ab66-e7984285d90e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533803,"event_type_id":6,"status":"blocked"}


event_id: abaf0a5b-d46f-4bd3-9542-24c67a1b844c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472770,"detection_time":1742533803,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":58319,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 31905602-e2e8-4f9f-90d0-3624051fded7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533803,"event_type_id":6,"status":"blocked"}


event_id: b72a4879-bf8f-48a8-a397-3728fc673be1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472777,"detection_time":1742533803,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":24287,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eac12e61-8139-479f-adf9-21a340463f39
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533804,"event_type_id":6,"status":"blocked"}


event_id: a890a71c-4cfe-40ae-bba7-eecb94309e48
log_level: critical
event_category: detections
event_data:
{"connection_id":5472781,"detection_time":1742533804,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62668,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 76ca2e77-5749-43d9-9b73-957512d97ca3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533804,"event_type_id":6,"status":"blocked"}


event_id: 61b28e66-dafc-452f-8bc0-67c9f089dc58
log_level: critical
event_category: detections
event_data:
{"connection_id":5472788,"detection_time":1742533804,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53587,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 15a24f24-b5de-438c-8b5b-8f56f2b73742
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533805,"event_type_id":6,"status":"blocked"}


event_id: 20d89ca1-b7bd-40ad-acdf-887acfeeb05a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472787,"detection_time":1742533805,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52189,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b47170e7-5f99-44df-9646-1b2f74abed97
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533806,"event_type_id":6,"status":"blocked"}


event_id: 6fd915fe-687c-4867-b31c-02b362cda76c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472801,"detection_time":1742533806,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":50709,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ceeaa8cf-b9f5-4d68-8c8a-18cb2a098456
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533806,"event_type_id":6,"status":"blocked"}


event_id: 7ac640a2-8114-4667-9764-1a0ece2cdf63
log_level: critical
event_category: detections
event_data:
{"connection_id":5472779,"detection_time":1742533806,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15937,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9e845073-785a-4e46-977c-0ed57f48acea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533806,"event_type_id":6,"status":"blocked"}


event_id: 70c86990-fba2-407d-85ae-02b629f6db75
log_level: critical
event_category: detections
event_data:
{"connection_id":5472813,"detection_time":1742533806,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":55378,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ecca4344-f300-42ca-a915-9e3eb75a3250
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533807,"event_type_id":6,"status":"blocked"}


event_id: c796dfa4-4fba-45bb-83c5-34cf3fd37694
log_level: critical
event_category: detections
event_data:
{"connection_id":5472810,"detection_time":1742533807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":53421,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e404dfaf-bdfe-4d5c-bef8-8e8019505b80
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533807,"event_type_id":6,"status":"blocked"}


event_id: 7853b8ac-4256-46b8-aa14-1b3151d6b4b7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472815,"detection_time":1742533807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":38829,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8c2b1df1-51cf-4737-834d-aaf9bd4de110
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533807,"event_type_id":6,"status":"blocked"}


event_id: 21495a36-c582-48f0-9232-fabb57f6b656
log_level: critical
event_category: detections
event_data:
{"connection_id":5472780,"detection_time":1742533807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":16849,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ee2ee5f4-ebf0-49fd-a7a5-9397843b0983
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533808,"event_type_id":6,"status":"blocked"}


event_id: fbda1192-c196-4a76-a30e-1215b84322b7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472817,"detection_time":1742533808,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58622,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4af3e3a1-bf2f-48eb-b2ca-95d2f4155d99
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533808,"event_type_id":6,"status":"blocked"}


event_id: 0a9b9b67-7a57-44f3-9e8d-92a4ee461534
log_level: critical
event_category: detections
event_data:
{"connection_id":5472818,"detection_time":1742533808,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":15864,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dc67d76c-3880-4c70-a256-c9b48c96b6e1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533809,"event_type_id":6,"status":"blocked"}


event_id: c8f665c5-17fe-4370-a9ad-7a2bd448b578
log_level: critical
event_category: detections
event_data:
{"connection_id":5472819,"detection_time":1742533809,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":62620,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9c30e099-ace2-4634-80a2-ad0df57c2aa9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533809,"event_type_id":6,"status":"blocked"}


event_id: 1c4dd191-d1f3-4f45-a323-77a3059fe513
log_level: critical
event_category: detections
event_data:
{"connection_id":5472820,"detection_time":1742533809,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":19030,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 18bc53c6-da36-41d1-8f46-3f32c4588bfb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533810,"event_type_id":6,"status":"blocked"}


event_id: bdb7e6b2-55ad-4dc5-bde2-7300a94ac643
log_level: critical
event_category: detections
event_data:
{"connection_id":5472823,"detection_time":1742533810,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":47529,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 63a86b35-595d-45a1-8981-616c2b537f50
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533810,"event_type_id":6,"status":"blocked"}


event_id: 3fc88a2c-3b1f-4bfd-afdf-d535ba9f2f8e
log_level: critical
event_category: detections
event_data:
{"connection_id":5472821,"detection_time":1742533810,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59779,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 09c381ee-0164-4150-8b3f-70cadd14212b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533810,"event_type_id":6,"status":"blocked"}


event_id: ecdc7564-5729-4356-89c5-2bd5c0abdd3c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472824,"detection_time":1742533810,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60949,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a4cc081-47c0-4f99-8165-b336854234c7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472825,"detection_time":1742533810,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61711,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2598e450-bba1-4a05-8fbf-32d540016189
log_level: critical
event_category: detections
event_data:
{"connection_id":5472827,"detection_time":1742533810,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62871,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 35e801de-c4c0-419b-95ac-b1ef7171af58
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533811,"event_type_id":6,"status":"blocked"}


event_id: 1b31506c-e903-477c-85b7-ebb3bb64b7b4
log_level: critical
event_category: detections
event_data:
{"connection_id":5472830,"detection_time":1742533811,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":24425,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 246379bd-b6a6-4b6c-9423-513bf9358eae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533811,"event_type_id":6,"status":"blocked"}


event_id: f4ffb0c0-ae0a-4ffd-9f9c-a8b2c06e27fc
log_level: critical
event_category: detections
event_data:
{"connection_id":5472836,"detection_time":1742533811,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":52343,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd3942ac-b529-497c-bdb2-0362b4cc6962
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533812,"event_type_id":6,"status":"blocked"}


event_id: 9937c272-2a97-4f8d-8386-080f4a2d5721
log_level: critical
event_category: detections
event_data:
{"connection_id":5472834,"detection_time":1742533812,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":55283,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d5205d28-afab-4b85-aa00-603f646aa86b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533812,"event_type_id":6,"status":"blocked"}


event_id: 7067f76b-51f6-4bad-822a-2ecfd0402ab5
log_level: critical
event_category: detections
event_data:
{"connection_id":5472835,"detection_time":1742533812,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":29814,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 907b7045-53d6-4f61-8b09-f2e04ddad240
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533812,"event_type_id":6,"status":"blocked"}


event_id: a607fabe-6b02-44f3-a95f-347a1b0a3d88
log_level: critical
event_category: detections
event_data:
{"connection_id":5472837,"detection_time":1742533812,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58495,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 30d26b01-2fe4-4034-9c35-867ce74cf67e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533813,"event_type_id":6,"status":"blocked"}


event_id: fb7a0486-3613-4535-b6b7-6643d98e6389
log_level: critical
event_category: detections
event_data:
{"connection_id":5472840,"detection_time":1742533813,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":11715,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: beac9497-7aa0-4f24-bbf4-26e85f6b0ea4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533813,"event_type_id":6,"status":"blocked"}


event_id: 1f0a6d54-7fcf-4822-b7f4-409e2966d06b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472842,"detection_time":1742533813,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":22587,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc5c8b41-e214-467d-aaba-2b57870c79b1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533816,"event_type_id":6,"status":"blocked"}


event_id: 1900c473-325b-4507-8857-9c3c423f9924
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533817,"event_type_id":6,"status":"blocked"}


event_id: bc027364-217d-4376-9cee-758795b828a9
log_level: critical
event_category: detections
event_data:
{"connection_id":5472854,"detection_time":1742533817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":45902,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c40fcfc-2c61-49f8-a215-9bf229674bd0
log_level: critical
event_category: detections
event_data:
{"connection_id":5472855,"detection_time":1742533817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":25288,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d6dc75ea-0460-4b28-a793-e2f94f6f9dc1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533817,"event_type_id":6,"status":"blocked"}


event_id: dd9f28d6-2a21-4e53-a6f3-b235e5bc1295
log_level: critical
event_category: detections
event_data:
{"connection_id":5472858,"detection_time":1742533817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9461,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a66252db-af9a-4137-bda5-a52121941b70
log_level: critical
event_category: detections
event_data:
{"connection_id":5472857,"detection_time":1742533817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":26548,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 911757a9-7bc6-42de-b5ac-c948e74338e4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533817,"event_type_id":6,"status":"blocked"}


event_id: f0f4b4e3-5fd2-40d9-8fe9-38ac23ec3ef6
log_level: critical
event_category: detections
event_data:
{"connection_id":5472859,"detection_time":1742533817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65276,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 93da3f34-60b6-4a97-b04a-3cbd5ae95b31
log_level: critical
event_category: detections
event_data:
{"connection_id":5472862,"detection_time":1742533817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50109,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3cdc5be2-1976-4751-bc4b-89f234c4f495
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533817,"event_type_id":6,"status":"blocked"}


event_id: 084dc1d0-e2d2-492f-b7ce-4b2fcff70be8
log_level: critical
event_category: detections
event_data:
{"connection_id":5472863,"detection_time":1742533817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48568,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0685e7fa-342e-412f-afd0-98882cb92e19
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533818,"event_type_id":6,"status":"blocked"}


event_id: 993497d6-0f85-4bb2-8b2f-fd10c5b6fcbb
log_level: critical
event_category: detections
event_data:
{"connection_id":5472869,"detection_time":1742533818,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15725,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 326d913f-cdef-4c77-9b34-b26322dfca57
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533820,"event_type_id":6,"status":"blocked"}


event_id: e7c0e9ca-2dd5-4922-9bfe-4c582cede134
log_level: critical
event_category: detections
event_data:
{"connection_id":5472880,"detection_time":1742533820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":55386,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6fe1dd39-168d-4571-98ad-791959d9d2e5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533820,"event_type_id":6,"status":"blocked"}


event_id: eb80fd9b-9879-43f7-93d4-3e3eed0e7045
log_level: critical
event_category: detections
event_data:
{"connection_id":5472876,"detection_time":1742533820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39204,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 46cc4888-d0f8-48c3-9be7-b2f36ae24e97
log_level: critical
event_category: detections
event_data:
{"connection_id":5472883,"detection_time":1742533820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":42913,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8f94406b-245f-4c33-86f8-6f31d1b53d97
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533820,"event_type_id":6,"status":"blocked"}


event_id: e1f2f091-7db8-456a-af04-9b0daa873278
log_level: critical
event_category: detections
event_data:
{"connection_id":5472874,"detection_time":1742533820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":53021,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f6888a5f-a42d-4242-bb9f-41c6a910d26f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533821,"event_type_id":6,"status":"blocked"}


event_id: 1fdc9f4a-34e8-45fb-9aa8-d92e2511739a
log_level: critical
event_category: detections
event_data:
{"connection_id":5472877,"detection_time":1742533821,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59181,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83d28d8c-c228-46e5-9127-5169925e4821
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533822,"event_type_id":6,"status":"blocked"}


event_id: f36409e0-a6e5-4caa-a435-60ec2345ec0b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472884,"detection_time":1742533822,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56406,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 97ac1c1b-7cc1-4a05-a41d-88103f1d05d1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472887,"detection_time":1742533822,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57752,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a5c2fbba-dfc9-43bf-a271-ce7ab22b84f7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533822,"event_type_id":6,"status":"blocked"}


event_id: 9bc14fe2-f199-4bc3-915a-9482401f8d9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5472890,"detection_time":1742533822,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61277,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4b9babc9-c33f-4d07-9c32-54ba0394335d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472891,"detection_time":1742533822,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59122,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a7f3f038-21ab-4b57-b021-4d7aa9241047
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533822,"event_type_id":6,"status":"blocked"}


event_id: a2ef1edb-7a53-4034-911d-2e25d46ffdf2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472893,"detection_time":1742533822,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":30546,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2db79747-9466-4e30-87a9-a35130e4ee23
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533823,"event_type_id":6,"status":"blocked"}


event_id: 1a147af9-8e54-482a-83de-54337b5717d7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472896,"detection_time":1742533823,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":32657,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3f66c568-4356-4ec5-9500-56e8586ce55e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533824,"event_type_id":6,"status":"blocked"}


event_id: c9a31752-c2cf-4160-b157-88fd8db4721b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472899,"detection_time":1742533824,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54187,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9876a1d2-502f-428a-971b-ef92819d722e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533825,"event_type_id":6,"status":"blocked"}


event_id: 707323cb-155b-4601-85fa-f0e9a2143f6b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472908,"detection_time":1742533825,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":55303,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5128af45-b631-4d16-8a02-e00f3c5b3be2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533825,"event_type_id":6,"status":"blocked"}


event_id: 7057b95a-639c-437b-b6be-62ca1a170235
log_level: critical
event_category: detections
event_data:
{"connection_id":5472909,"detection_time":1742533825,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":16287,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4568260c-5b64-4576-a548-2c3e2f41dfab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533825,"event_type_id":6,"status":"blocked"}


event_id: 01752cb7-5119-47e0-b132-9cedb6b2de75
log_level: critical
event_category: detections
event_data:
{"connection_id":5472906,"detection_time":1742533825,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":59062,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a3bc4ba-b02e-418c-9ea1-7409d6811330
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533826,"event_type_id":6,"status":"blocked"}


event_id: d5c7cb31-0810-40b5-933e-69dc19eeb513
log_level: critical
event_category: detections
event_data:
{"connection_id":5472900,"detection_time":1742533826,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":4497,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fdb043b8-7981-4616-bcd6-18b62ef0aac2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533826,"event_type_id":6,"status":"blocked"}


event_id: 150e420f-c307-4a92-95a4-1d9c5fafbeff
log_level: critical
event_category: detections
event_data:
{"connection_id":5472907,"detection_time":1742533826,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":14208,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74c405da-6d00-42cc-ad80-fae0325c7d33
log_level: critical
event_category: detections
event_data:
{"connection_id":5472905,"detection_time":1742533826,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":6681,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a03f16b-9e7f-4625-93f3-0a55e469b0b3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533826,"event_type_id":6,"status":"blocked"}


event_id: 2c8c37b2-5222-45af-ad8f-e30f48eb4b73
log_level: critical
event_category: detections
event_data:
{"connection_id":5472912,"detection_time":1742533826,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":56099,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: db156293-900a-46ea-a2d0-7b4e31ad9285
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533828,"event_type_id":6,"status":"blocked"}


event_id: 98e997ca-e3a0-4684-b09a-2b4c33ac5536
log_level: critical
event_category: detections
event_data:
{"connection_id":5472918,"detection_time":1742533828,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":64519,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d54aeaeb-d743-40ce-83a6-092f40627b61
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533829,"event_type_id":6,"status":"blocked"}


event_id: ae3bee68-d84c-40a1-8e67-bd2c6ab5d794
log_level: critical
event_category: detections
event_data:
{"connection_id":5472917,"detection_time":1742533829,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61552,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 747e519f-b058-4982-83a3-ed1886462437
log_level: critical
event_category: detections
event_data:
{"connection_id":5472919,"detection_time":1742533829,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62624,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d4757d14-495f-4765-8b98-943290c402d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533830,"event_type_id":6,"status":"blocked"}


event_id: 5c1e4223-4eb1-420b-bfe9-73fb222569dc
log_level: critical
event_category: detections
event_data:
{"connection_id":5472925,"detection_time":1742533830,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":31349,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3656f807-3bdc-4778-8045-75313accccd0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533831,"event_type_id":6,"status":"blocked"}


event_id: 6ce830de-eeb9-4e21-a65e-7b4488ba3ced
log_level: critical
event_category: detections
event_data:
{"connection_id":5472927,"detection_time":1742533831,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":61159,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7e756851-a796-4a33-894d-6cc373699bd8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533831,"event_type_id":6,"status":"blocked"}


event_id: 1ffbc26d-c594-4183-a16a-b2a8fea95593
log_level: critical
event_category: detections
event_data:
{"connection_id":5472929,"detection_time":1742533831,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14082,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c17cbf29-97c6-4808-80e5-f65c95880fb2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472930,"detection_time":1742533831,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":62585,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92483e68-4f97-477d-b0d3-257e6659a961
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533832,"event_type_id":6,"status":"blocked"}


event_id: 53410947-152a-44fb-9b88-91e548d2b118
log_level: critical
event_category: detections
event_data:
{"connection_id":5472934,"detection_time":1742533832,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":38638,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3db75548-46cf-4296-9f91-cdfa01068a22
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533832,"event_type_id":6,"status":"blocked"}


event_id: 692c67b0-a7af-4cb4-b466-1cd31f02309d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472935,"detection_time":1742533832,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":7147,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dd4f11d6-7ba1-4081-bee0-8e395a65edad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533833,"event_type_id":6,"status":"blocked"}


event_id: 99f01761-8684-4f93-beba-a780bc9d0c64
log_level: critical
event_category: detections
event_data:
{"connection_id":5472937,"detection_time":1742533833,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":4387,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3f3a08c2-bfb3-43d6-a3d9-62b5b22a4963
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533833,"event_type_id":6,"status":"blocked"}


event_id: 38d18eb3-4e6b-4518-817f-a417a297ce3c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472939,"detection_time":1742533833,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42915,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c1a68fb8-cf67-4d63-8e54-ce211c97691e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533833,"event_type_id":6,"status":"blocked"}


event_id: 97ffdb16-9b16-4a2b-bd2f-a8a5ff8cd85d
log_level: critical
event_category: detections
event_data:
{"connection_id":5472938,"detection_time":1742533833,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52709,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 745fdab2-cf9b-4a57-baae-79b80f527677
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533834,"event_type_id":6,"status":"blocked"}


event_id: 19c1612f-2882-4eef-8af5-959c5239ddd3
log_level: critical
event_category: detections
event_data:
{"connection_id":5472941,"detection_time":1742533834,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54617,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3c9a6c45-3e3f-46f9-8b5f-26520b9b163f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533834,"event_type_id":6,"status":"blocked"}


event_id: 2f69ac7f-0f48-4edb-b066-7c09aa3608d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5472943,"detection_time":1742533834,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60585,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a238dced-5571-4549-8184-f0e27a2d2a9c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472945,"detection_time":1742533834,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56091,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e4b7f35b-8bf3-4f66-a896-0e79c4160368
log_level: critical
event_category: detections
event_data:
{"connection_id":5472946,"detection_time":1742533834,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61287,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bd2d6e9a-effc-49cd-bbc7-5c7ebb1521d9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533836,"event_type_id":6,"status":"blocked"}


event_id: 1f61e601-40e2-428f-9407-88619dc49b06
log_level: critical
event_category: detections
event_data:
{"connection_id":5472956,"detection_time":1742533836,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":30738,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5afc18c8-78d5-4f7b-9e50-e8a890c473d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533836,"event_type_id":6,"status":"blocked"}


event_id: e721a06a-6efc-4d69-8881-dd233e8dc0b7
log_level: critical
event_category: detections
event_data:
{"connection_id":5472959,"detection_time":1742533836,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51061,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7ddc65f1-757f-44d1-acd3-5ce1f1dc8126
log_level: critical
event_category: detections
event_data:
{"connection_id":5472962,"detection_time":1742533836,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":33546,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a91bb6d-7782-49d0-9ca2-4bdbec936972
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533837,"event_type_id":6,"status":"blocked"}


event_id: cbafe745-112c-4c64-b516-233594f36cc1
log_level: critical
event_category: detections
event_data:
{"connection_id":5472963,"detection_time":1742533837,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":19081,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf4fa4d9-766d-4680-bfcc-fc140a58773d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533838,"event_type_id":6,"status":"blocked"}


event_id: 6559be86-a98e-447f-bbb4-e6b9eccddda6
log_level: critical
event_category: detections
event_data:
{"connection_id":5472970,"detection_time":1742533838,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":60672,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44db7bc6-6abc-48db-8b11-5653eed588fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533839,"event_type_id":6,"status":"blocked"}


event_id: f7ff2c36-2822-447f-9f24-1d698b434f24
log_level: critical
event_category: detections
event_data:
{"connection_id":5472973,"detection_time":1742533839,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":63845,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 186df9ce-3a41-48a6-9069-5d802037eb5a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533839,"event_type_id":6,"status":"blocked"}


event_id: aae68b44-ce9d-4d16-8247-7a12ad5d121c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472977,"detection_time":1742533839,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":58238,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f6236225-1eeb-4c77-b9bd-7780bb6e9d9e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533839,"event_type_id":6,"status":"blocked"}


event_id: 737a85fc-5934-4e85-970e-926b07f973e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5472974,"detection_time":1742533839,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":43439,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e0438cff-b11a-4561-a4ba-57034821f122
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533839,"event_type_id":6,"status":"blocked"}


event_id: a97366e1-f436-4714-a49a-7cd8d3fd2019
log_level: critical
event_category: detections
event_data:
{"connection_id":5472975,"detection_time":1742533839,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":28241,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b170a3d5-bd2c-42c2-b634-7f20bcaccd90
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533840,"event_type_id":6,"status":"blocked"}


event_id: e2c13b42-cb1f-46b0-ab24-1a15a78b0779
log_level: critical
event_category: detections
event_data:
{"connection_id":5472978,"detection_time":1742533840,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":4917,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1428c651-c88e-4460-ae5f-9a5d49c315c0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533841,"event_type_id":6,"status":"blocked"}


event_id: b03220dc-0616-42b5-b7a4-d73ce77e7a1b
log_level: critical
event_category: detections
event_data:
{"connection_id":5472980,"detection_time":1742533841,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57887,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 15283ddf-4f29-4add-9b80-940c6a38023c
log_level: critical
event_category: detections
event_data:
{"connection_id":5472981,"detection_time":1742533841,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58921,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1aa35386-9795-4587-aca0-838ac8b282f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533841,"event_type_id":6,"status":"blocked"}


event_id: d99a9bd5-d2d4-4521-b28f-0f9a5be9f495
log_level: critical
event_category: detections
event_data:
{"connection_id":5472988,"detection_time":1742533841,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":51531,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 35f8efed-c13f-486a-870f-0d3111d58b6a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533841,"event_type_id":6,"status":"blocked"}


event_id: fedcec20-9d48-48c1-a975-6d5be9132b57
log_level: critical
event_category: detections
event_data:
{"connection_id":5472983,"detection_time":1742533841,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":35872,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3162da71-fb2e-4dbc-8e62-6d9dc1f876fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533843,"event_type_id":6,"status":"blocked"}


event_id: 8c30d212-7893-4987-a2ec-cd3b0d385be8
log_level: critical
event_category: detections
event_data:
{"connection_id":5472989,"detection_time":1742533843,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":56760,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2684b146-6190-4917-8b7a-53becfb55a27
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533844,"event_type_id":6,"status":"blocked"}


event_id: 28146580-411d-4513-bc26-cfb777c655bf
log_level: critical
event_category: detections
event_data:
{"connection_id":5473005,"detection_time":1742533844,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46194,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eee6c1dc-7bb1-4563-a17a-e511e05fc2a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533845,"event_type_id":6,"status":"blocked"}


event_id: e2991fe0-980d-48d7-b2ce-02a7579aee62
log_level: critical
event_category: detections
event_data:
{"connection_id":5473014,"detection_time":1742533845,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65379,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1bc6b72a-dcb2-496c-bc5d-080585b60656
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533845,"event_type_id":6,"status":"blocked"}


event_id: 47600ca0-0297-4d82-b204-ecef421febcf
log_level: critical
event_category: detections
event_data:
{"connection_id":5473028,"detection_time":1742533845,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61650,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 01cc94f5-f7ed-45ec-b0da-03ade9c91808
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533846,"event_type_id":6,"status":"blocked"}


event_id: ec28f052-e885-4070-8b5a-e6cf32d0372a
log_level: critical
event_category: detections
event_data:
{"connection_id":5473020,"detection_time":1742533846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51027,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3ae88c71-d47b-43b3-af08-5456d4c27dc3
log_level: critical
event_category: detections
event_data:
{"connection_id":5473024,"detection_time":1742533846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52776,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 06b2944d-3029-4193-9887-0de2f4a0b69f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533846,"event_type_id":6,"status":"blocked"}


event_id: 9bc23c4e-6c04-43ba-a17e-49f184d52195
log_level: critical
event_category: detections
event_data:
{"connection_id":5473022,"detection_time":1742533846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61064,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de39939b-7561-4d7a-93ad-9594ecd24c73
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533846,"event_type_id":6,"status":"blocked"}


event_id: ba8c13e2-2365-4d8b-880d-1c7b50084bea
log_level: critical
event_category: detections
event_data:
{"connection_id":5473025,"detection_time":1742533846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26336,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0f54e619-848e-43ad-aca9-d02a64cec4b2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533846,"event_type_id":6,"status":"blocked"}


event_id: 1697e039-b9a3-41aa-9606-68f0e29db896
log_level: critical
event_category: detections
event_data:
{"connection_id":5473031,"detection_time":1742533846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":5587,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 26c14faf-aa68-452f-b372-c1e67e0d4fa4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533846,"event_type_id":6,"status":"blocked"}


event_id: 6c3b9e0e-efed-4c7f-8432-e68940aff61c
log_level: critical
event_category: detections
event_data:
{"connection_id":5473032,"detection_time":1742533846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":54710,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03edbf17-dddb-454e-8220-635acf9eee2a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533847,"event_type_id":6,"status":"blocked"}


event_id: e4c52eed-3fc0-4419-b200-ffb19691c251
log_level: critical
event_category: detections
event_data:
{"connection_id":5473039,"detection_time":1742533847,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":57951,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 882d1404-df47-4ac9-894d-df5d4ed30485
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533847,"event_type_id":6,"status":"blocked"}


event_id: 9a6a5293-b377-4b71-a2bf-6b2b3d92e916
log_level: critical
event_category: detections
event_data:
{"connection_id":5473033,"detection_time":1742533847,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":29261,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 68f12940-074c-4bfb-932f-c691fc755970
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533847,"event_type_id":6,"status":"blocked"}


event_id: f5363d50-5ddc-4cc8-9675-bdbc14957762
log_level: critical
event_category: detections
event_data:
{"connection_id":5473035,"detection_time":1742533847,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":7085,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 105d7e50-1202-4f81-a3f4-71eb712a20a7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533848,"event_type_id":6,"status":"blocked"}


event_id: cddb0e8d-cbe0-4f02-ab45-0ae7b22cee99
log_level: critical
event_category: detections
event_data:
{"connection_id":5473040,"detection_time":1742533848,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64014,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 25aac636-08a6-47f0-9cfe-ef43f5c6a43b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533848,"event_type_id":6,"status":"blocked"}


event_id: c530bf1e-4422-4a8d-8d81-2448c1d62600
log_level: critical
event_category: detections
event_data:
{"connection_id":5473041,"detection_time":1742533848,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":60543,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c2a3f2fd-e476-4be0-aeee-5ea327dc40bc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533850,"event_type_id":6,"status":"blocked"}


event_id: 2f3df3d4-beda-49a2-962a-40c5253a7c57
log_level: critical
event_category: detections
event_data:
{"connection_id":5473053,"detection_time":1742533850,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":62679,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc6f7fc0-1da3-47f2-a7e4-de3e85cb8b97
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533850,"event_type_id":6,"status":"blocked"}


event_id: 33d552fa-392d-46ed-ac7e-689396dd6ff0
log_level: critical
event_category: detections
event_data:
{"connection_id":5473054,"detection_time":1742533850,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":20056,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4014ee6c-1816-4e73-972f-d8877e12aa4f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533851,"event_type_id":6,"status":"blocked"}


event_id: ffb98467-2547-4a9f-97c5-3de38b83fc4b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473058,"detection_time":1742533851,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":23165,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3452c688-96f1-46eb-91d3-6ad8bcc17a15
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533852,"event_type_id":6,"status":"blocked"}


event_id: 3dfbb12b-e52e-474c-b7ce-628c8ad7651d
log_level: critical
event_category: detections
event_data:
{"connection_id":5473042,"detection_time":1742533852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":55834,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cabf67f3-3361-4ead-ba94-bf4623696027
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533852,"event_type_id":6,"status":"blocked"}


event_id: 8688142f-9114-480b-9092-22a04ec0b7de
log_level: critical
event_category: detections
event_data:
{"connection_id":5473071,"detection_time":1742533852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55844,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5e71068d-4edb-48f6-94d1-ed329cfae075
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533852,"event_type_id":6,"status":"blocked"}


event_id: 0d650708-cbba-4d42-a813-dccccde580e8
log_level: critical
event_category: detections
event_data:
{"connection_id":5473064,"detection_time":1742533852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":10862,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0bbf249e-3b8a-4c8a-98df-f07f02fa1af6
log_level: critical
event_category: detections
event_data:
{"connection_id":5473068,"detection_time":1742533852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54590,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c9fb1db4-3181-4be5-bc29-d34b6d1058a0
log_level: critical
event_category: detections
event_data:
{"connection_id":5473070,"detection_time":1742533852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13254,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 11321fe7-73ac-45ce-a778-efcb45f8bfd0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533853,"event_type_id":6,"status":"blocked"}


event_id: 6146c0f1-8c44-4850-8746-bab32c13b478
log_level: critical
event_category: detections
event_data:
{"connection_id":5473078,"detection_time":1742533853,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":61192,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b72de774-fad9-4d31-8025-a63676f0ad5e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533855,"event_type_id":6,"status":"blocked"}


event_id: d9f7ed42-d2dc-4666-b9fe-b1fbcf3c9a4e
log_level: critical
event_category: detections
event_data:
{"connection_id":5473082,"detection_time":1742533855,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":65047,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 06846352-a019-4c67-9942-c56b0101e13c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533855,"event_type_id":6,"status":"blocked"}


event_id: 32ad815d-8361-4ad3-8c06-a6ded0203a14
log_level: critical
event_category: detections
event_data:
{"connection_id":5473084,"detection_time":1742533855,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":58968,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bff763d1-5207-45b6-979d-736e42c8d0e8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533855,"event_type_id":6,"status":"blocked"}


event_id: 5cea8030-0d58-4337-830e-6bbd9b45ffdc
log_level: critical
event_category: detections
event_data:
{"connection_id":5473086,"detection_time":1742533855,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39349,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 29d04351-59c6-49dd-a67c-666ce61a5995
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533856,"event_type_id":6,"status":"blocked"}


event_id: c771ccff-62cb-4570-84ef-34c50b2a063a
log_level: critical
event_category: detections
event_data:
{"connection_id":5473090,"detection_time":1742533856,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":61183,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c83ff377-822f-4dc7-af71-579e96f147f6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533856,"event_type_id":6,"status":"blocked"}


event_id: cda9fdaf-faf5-4994-81e9-4db2ef4ba54c
log_level: critical
event_category: detections
event_data:
{"connection_id":5473097,"detection_time":1742533856,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":64710,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eeca96b9-040c-4210-b3f5-02bbbc9c6b5f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533857,"event_type_id":6,"status":"blocked"}


event_id: b54c0c8d-45e1-45b6-af61-629805a1c2c1
log_level: critical
event_category: detections
event_data:
{"connection_id":5473095,"detection_time":1742533857,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62097,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 43c2f010-096f-4b84-88e8-8679d7c3ca27
log_level: critical
event_category: detections
event_data:
{"connection_id":5473098,"detection_time":1742533857,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62933,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 93a055c8-9f41-4478-b8c4-a5efa96d0d09
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533858,"event_type_id":6,"status":"blocked"}


event_id: 20c44db0-df0e-4df1-bc40-f8e262cd702b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473100,"detection_time":1742533858,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65403,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f52d69e7-3d85-43a8-b64d-cc19c4a92fed
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533858,"event_type_id":6,"status":"blocked"}


event_id: f5f7392a-ec46-4546-8b4a-30cd0af2fa7d
log_level: critical
event_category: detections
event_data:
{"connection_id":5473101,"detection_time":1742533858,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61047,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: db8d2c8e-ae2a-4388-9592-34eb2f8851cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533859,"event_type_id":6,"status":"blocked"}


event_id: c8dc16d8-2ac8-4d80-92df-fb8a916552a8
log_level: critical
event_category: detections
event_data:
{"connection_id":5473104,"detection_time":1742533859,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62554,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 832421e6-2d0d-4e7e-97a7-c00d0a22eca4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533860,"event_type_id":6,"status":"blocked"}


event_id: 1f73ec12-ffdc-4bb8-9614-de7583e4ebdd
log_level: critical
event_category: detections
event_data:
{"connection_id":5473109,"detection_time":1742533860,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":11626,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 505e6588-9031-4df4-b695-2bef22a1f7ee
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533860,"event_type_id":6,"status":"blocked"}


event_id: 98fd5b7a-2217-4678-a3ee-e0f65dced46a
log_level: critical
event_category: detections
event_data:
{"connection_id":5473111,"detection_time":1742533860,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60557,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 006884e1-0ce3-4db4-875b-b88eacc7a75b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533860,"event_type_id":6,"status":"blocked"}


event_id: 613a69f1-8946-4065-8b58-d9a9b17e1fc9
log_level: critical
event_category: detections
event_data:
{"connection_id":5473114,"detection_time":1742533860,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":41385,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 686eacf7-0098-4a34-b962-ba3001433d8e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533861,"event_type_id":6,"status":"blocked"}


event_id: c73de217-e4f7-4f17-bc53-05a9a220ea6a
log_level: critical
event_category: detections
event_data:
{"connection_id":5473116,"detection_time":1742533861,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":42619,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4a52bd05-aebb-4e67-9a70-3bc0f9c0ad79
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533861,"event_type_id":6,"status":"blocked"}


event_id: 041d2d5e-73d7-4db5-959e-e886a458803d
log_level: critical
event_category: detections
event_data:
{"connection_id":5473117,"detection_time":1742533861,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":58988,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7477ff0f-7c07-4726-85b5-10f242102759
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533862,"event_type_id":6,"status":"blocked"}


event_id: 198f4e23-7997-44af-ab56-2437363aed78
log_level: critical
event_category: detections
event_data:
{"connection_id":5473122,"detection_time":1742533862,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":19026,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 517e60a1-c995-41c5-a7d7-7aca4ed8aba0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533862,"event_type_id":6,"status":"blocked"}


event_id: e2b041f3-b46e-4180-8f5e-a0aaa137610f
log_level: critical
event_category: detections
event_data:
{"connection_id":5473099,"detection_time":1742533862,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":10760,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 053891d8-08e9-4462-9de2-a877b4e78d5d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533862,"event_type_id":6,"status":"blocked"}


event_id: 21eba2d3-a514-4498-a4f1-c4556f659dd5
log_level: critical
event_category: detections
event_data:
{"connection_id":5473123,"detection_time":1742533862,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":49089,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5076b778-7331-4f37-8845-2d367f1ec004
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533863,"event_type_id":6,"status":"blocked"}


event_id: 9505cb8f-6dad-406b-bd26-44f3d863e144
log_level: critical
event_category: detections
event_data:
{"connection_id":5473125,"detection_time":1742533863,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23115,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 23e775ce-149e-4cfb-b7b8-3d92a93f96cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533864,"event_type_id":6,"status":"blocked"}


event_id: 4b9abbc9-6fff-4565-ae63-fc3829aed0a6
log_level: critical
event_category: detections
event_data:
{"connection_id":5473139,"detection_time":1742533864,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50732,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 254d5c8f-ff75-44ba-812c-eb21247924a0
log_level: critical
event_category: detections
event_data:
{"connection_id":5473142,"detection_time":1742533864,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52006,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c0b60908-f1fe-4b91-bcc8-ac4ac15add69
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533865,"event_type_id":6,"status":"blocked"}


event_id: fda5cfc6-1d60-46e7-b2e1-48d1103c9119
log_level: critical
event_category: detections
event_data:
{"connection_id":5473150,"detection_time":1742533865,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":10852,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c07e210f-3fdb-43d8-ab39-770b4e689314
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533866,"event_type_id":6,"status":"blocked"}


event_id: 71ce3fb8-5d08-4078-9d2f-56c33a33c45e
log_level: critical
event_category: detections
event_data:
{"connection_id":5473159,"detection_time":1742533866,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":13745,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: abe73b94-05e5-4fb7-98eb-22f3c61a635b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533866,"event_type_id":6,"status":"blocked"}


event_id: a8660c9c-9387-4fae-838d-f3614afcee08
log_level: critical
event_category: detections
event_data:
{"connection_id":5473160,"detection_time":1742533866,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":64116,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 38d590a9-2352-4a81-ae4c-1b92a71f1a7b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533867,"event_type_id":6,"status":"blocked"}


event_id: cc45e077-e754-4119-98c2-5de2a5b27cd4
log_level: critical
event_category: detections
event_data:
{"connection_id":5473173,"detection_time":1742533867,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":64121,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 72e5e0fa-37df-4cee-a111-e41e39148c18
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533867,"event_type_id":6,"status":"blocked"}


event_id: bcdbfb8d-2417-4268-88e0-f31cdd672a05
log_level: critical
event_category: detections
event_data:
{"connection_id":5473171,"detection_time":1742533867,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":59658,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 905bc08a-188e-49ef-aabc-c51068e1c0f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533867,"event_type_id":6,"status":"blocked"}


event_id: 0f6680df-def5-4cd2-ad17-519165b1e86c
log_level: critical
event_category: detections
event_data:
{"connection_id":5473167,"detection_time":1742533867,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":32541,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca032caa-b3c8-4ce0-8887-b48974d2150c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533867,"event_type_id":6,"status":"blocked"}


event_id: d6289e4e-1388-4049-9840-65ffa3c2e0f0
log_level: critical
event_category: detections
event_data:
{"connection_id":5473168,"detection_time":1742533867,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":41439,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 47850893-f1af-42e4-8b57-0b16590aa322
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533868,"event_type_id":6,"status":"blocked"}


event_id: b2e2eec1-df92-42c2-8280-7615ab45638b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473169,"detection_time":1742533868,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":33702,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4f87de99-36c6-4b9f-865c-12b74a0d9472
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533868,"event_type_id":6,"status":"blocked"}


event_id: b01dc97f-cb5c-4d3f-b3fc-49a6a205da34
log_level: critical
event_category: detections
event_data:
{"connection_id":5473174,"detection_time":1742533868,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":44275,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 67c127dc-8794-4861-ad1b-50ab5b5c4809
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533869,"event_type_id":6,"status":"blocked"}


event_id: 1e7526aa-e8d3-46d7-96d6-ac319a564b91
log_level: critical
event_category: detections
event_data:
{"connection_id":5473177,"detection_time":1742533869,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9110,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ae1063a-9663-4c68-931f-23e560980dad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533869,"event_type_id":6,"status":"blocked"}


event_id: 448f379f-b2e3-46aa-a7b8-2cd6cf8795e6
log_level: critical
event_category: detections
event_data:
{"connection_id":5473180,"detection_time":1742533869,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":24017,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e763d6cb-d449-4bd5-9742-49406cd8b9b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533869,"event_type_id":6,"status":"blocked"}


event_id: 8623f7cc-7d70-4a77-8311-13b52aa4d132
log_level: critical
event_category: detections
event_data:
{"connection_id":5473178,"detection_time":1742533869,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58152,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0ed6dc3f-fcab-4515-b58e-6006c6cfa78a
log_level: critical
event_category: detections
event_data:
{"connection_id":5473182,"detection_time":1742533869,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59724,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6948479f-bebe-4099-aa8b-06c162ade77a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533870,"event_type_id":6,"status":"blocked"}


event_id: 9bc51a97-8542-4c44-a3fb-60162582d9af
log_level: critical
event_category: detections
event_data:
{"connection_id":5473188,"detection_time":1742533870,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61897,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2015582d-e44c-4052-9d97-2c42aa05957e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533870,"event_type_id":6,"status":"blocked"}


event_id: 6dcefe4e-e994-478d-9da6-43d8ca866ae8
log_level: critical
event_category: detections
event_data:
{"connection_id":5473192,"detection_time":1742533870,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":49896,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d463468-a747-4b10-82c6-3cea7fc165d4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533871,"event_type_id":6,"status":"blocked"}


event_id: eedde18d-6d58-426f-a51c-1965e4c9d5fb
log_level: critical
event_category: detections
event_data:
{"connection_id":5473196,"detection_time":1742533871,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":16212,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6d5ac260-9bdf-4d41-b387-f8037b317a02
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533871,"event_type_id":6,"status":"blocked"}


event_id: acad02c2-0d92-4618-8ef1-3c38bcfa7699
log_level: critical
event_category: detections
event_data:
{"connection_id":5473195,"detection_time":1742533871,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62000,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bc3ba032-262d-4e9a-b983-762584cb48d6
log_level: critical
event_category: detections
event_data:
{"connection_id":5473202,"detection_time":1742533871,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62674,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 285bf7a3-c01e-4c46-9be5-1ef16a2c1e4d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533872,"event_type_id":6,"status":"blocked"}


event_id: d8afa6b8-a0d6-4763-a671-1f5a9a70befc
log_level: critical
event_category: detections
event_data:
{"connection_id":5473206,"detection_time":1742533872,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57219,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d99b53da-35e5-4f4b-b4e4-3f429c96fc3e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533872,"event_type_id":6,"status":"blocked"}


event_id: 443fc30f-093f-453e-86d5-1da488b09c3e
log_level: critical
event_category: detections
event_data:
{"connection_id":5473212,"detection_time":1742533872,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":37064,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8024ea5-ebe7-4a37-a69b-e12a801dea3f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533873,"event_type_id":6,"status":"blocked"}


event_id: 82fec367-31cb-408b-bea6-136911170743
log_level: critical
event_category: detections
event_data:
{"connection_id":5473211,"detection_time":1742533873,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":50141,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 22e7bddf-25a7-4c51-bd32-85cc81dc7c37
log_level: critical
event_category: detections
event_data:
{"connection_id":5473208,"detection_time":1742533873,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":49860,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 08bd2cf7-0e00-4e98-ad56-17d5108b4008
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533875,"event_type_id":6,"status":"blocked"}


event_id: 21ffe08e-23fe-454d-8bae-a8bb597986e3
log_level: critical
event_category: detections
event_data:
{"connection_id":5473227,"detection_time":1742533875,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6634,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74c3d3cb-4561-4fb7-91d7-95d0bd409525
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533876,"event_type_id":6,"status":"blocked"}


event_id: 2564f443-d145-4c26-8174-d16e2e7dd4d4
log_level: critical
event_category: detections
event_data:
{"connection_id":5473242,"detection_time":1742533876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52101,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f4891a64-89b1-4206-9e03-9f7f535d186a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533876,"event_type_id":6,"status":"blocked"}


event_id: 036cd946-9208-4af8-978b-8f29d50fe2e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5473232,"detection_time":1742533876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":34787,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 90b73b6c-0cf8-446b-8823-a3a3df552b02
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533876,"event_type_id":6,"status":"blocked"}


event_id: 7d753b07-d227-4a96-8e03-67ee13a4a4c1
log_level: critical
event_category: detections
event_data:
{"connection_id":5473231,"detection_time":1742533876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62772,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1b4c6bcb-a9f3-4f7d-b11b-3cf193860103
log_level: critical
event_category: detections
event_data:
{"connection_id":5473235,"detection_time":1742533876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64297,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 387f0c84-27a2-4e64-a84c-712e15386feb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533876,"event_type_id":6,"status":"blocked"}


event_id: 65a79ef9-7102-45da-9451-c74813ae716d
log_level: critical
event_category: detections
event_data:
{"connection_id":5473237,"detection_time":1742533876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":9926,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 20092c74-4fd6-4415-920d-174c5dfd0ef6
log_level: critical
event_category: detections
event_data:
{"connection_id":5473238,"detection_time":1742533876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":50497,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a338831b-74a5-4446-af87-0453366a76c0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533878,"event_type_id":6,"status":"blocked"}


event_id: 0e3a7568-a0be-489f-9ddb-3904b7bbc792
log_level: critical
event_category: detections
event_data:
{"connection_id":5473250,"detection_time":1742533878,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":41109,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c8b80fe5-5c01-4c8f-aecf-10752352b028
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533878,"event_type_id":6,"status":"blocked"}


event_id: f59588ff-7178-4274-aeb9-9e4718cdb7b4
log_level: critical
event_category: detections
event_data:
{"connection_id":5473257,"detection_time":1742533878,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":57763,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 053b6081-c907-4934-9924-1f2b9d8871fb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533880,"event_type_id":6,"status":"blocked"}


event_id: 0149c1af-e0e0-40a3-9002-569a211b2251
log_level: critical
event_category: detections
event_data:
{"connection_id":5473266,"detection_time":1742533880,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":64770,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e4a7a7ce-9035-4b70-a7e0-98c63f986f1d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533881,"event_type_id":6,"status":"blocked"}


event_id: ebc02a7e-4baa-4e97-b1fb-e7e64980b422
log_level: critical
event_category: detections
event_data:
{"connection_id":5473271,"detection_time":1742533881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54503,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1f7e4d2a-1021-4fa3-b4e5-8ccb5a71ccde
log_level: critical
event_category: detections
event_data:
{"connection_id":5473273,"detection_time":1742533881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55740,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c44571f-8c15-41b3-82a2-21e22b2377d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533881,"event_type_id":6,"status":"blocked"}


event_id: 846c7426-d2a2-46d8-900a-c5b0232bc3e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5473287,"detection_time":1742533881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":50837,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 619cf6d1-cc41-4bae-8d67-7e11cfeaaa1f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533881,"event_type_id":6,"status":"blocked"}


event_id: eee9b67a-0f43-4f33-ab87-07d65aa428e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5473276,"detection_time":1742533881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":3511,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aa0311d7-d660-4dbc-a4bc-74549d08ff54
log_level: critical
event_category: detections
event_data:
{"connection_id":5473280,"detection_time":1742533881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58309,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c58464a2-e9a3-4632-bd01-f0bbf3b3c9f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533881,"event_type_id":6,"status":"blocked"}


event_id: bb7359f1-5cb6-4423-b6db-cad7e92e5711
log_level: critical
event_category: detections
event_data:
{"connection_id":5473282,"detection_time":1742533881,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":55688,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c956c9ae-ef23-40c3-b0e7-8414fb2c1f41
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533882,"event_type_id":6,"status":"blocked"}


event_id: 43eb39e5-7a19-4665-8b30-57e76e5971e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5473289,"detection_time":1742533882,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":58288,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c36a9dc-be14-4781-94d7-bab47ac04491
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533884,"event_type_id":6,"status":"blocked"}


event_id: 3499761e-a9a1-4bcd-acc8-293fc1d33f3b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473304,"detection_time":1742533884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53645,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bcc91eb6-65b1-4b9c-8d8f-65f51492be23
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533884,"event_type_id":6,"status":"blocked"}


event_id: 407e8dad-3896-4fc5-94da-f4775765ce40
log_level: critical
event_category: detections
event_data:
{"connection_id":5473316,"detection_time":1742533884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62217,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82e3248d-818a-4d79-b086-a6b8eae59eb9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533884,"event_type_id":6,"status":"blocked"}


event_id: c5014ccc-7365-4e96-a651-506762817eb2
log_level: critical
event_category: detections
event_data:
{"connection_id":5473324,"detection_time":1742533884,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":39325,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 589ca6ba-1cb3-4c57-bc35-4f5a9b02b148
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533885,"event_type_id":6,"status":"blocked"}


event_id: d896c78e-1854-4a80-b948-a5cfc0f183fe
log_level: critical
event_category: detections
event_data:
{"connection_id":5473334,"detection_time":1742533885,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":41043,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c7e65b04-3cf9-492a-a054-7a8ccde38f57
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533885,"event_type_id":6,"status":"blocked"}


event_id: 7b6dad09-f34c-40da-abfb-9842e27dcbf3
log_level: critical
event_category: detections
event_data:
{"connection_id":5473338,"detection_time":1742533885,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19733,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 566ff1be-9b50-423d-8b3c-5fc2240a48e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533885,"event_type_id":6,"status":"blocked"}


event_id: 8fd90605-f341-4b52-b9df-d95c6e59e26f
log_level: critical
event_category: detections
event_data:
{"connection_id":5473341,"detection_time":1742533885,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63560,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7eb46f35-0206-47b7-8c0c-ac550f97558b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533887,"event_type_id":6,"status":"blocked"}


event_id: 515c1863-a11a-4b4f-a7b3-1e7c8c858926
log_level: critical
event_category: detections
event_data:
{"connection_id":5473363,"detection_time":1742533887,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":61201,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92c4d75f-4e18-4b60-b584-9721cdec20e7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533888,"event_type_id":6,"status":"blocked"}


event_id: 0dc6aa8e-0a83-4fcd-80f4-70ad02d55377
log_level: critical
event_category: detections
event_data:
{"connection_id":5473359,"detection_time":1742533888,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59512,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2eecc2c4-bea5-4440-9c39-461763eedfa6
log_level: critical
event_category: detections
event_data:
{"connection_id":5473361,"detection_time":1742533888,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61115,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 195b3efb-afab-41eb-934f-87e7c4c8e647
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533888,"event_type_id":6,"status":"blocked"}


event_id: c332fb18-5dbd-4def-993d-64dfada45a7e
log_level: critical
event_category: detections
event_data:
{"connection_id":5473374,"detection_time":1742533888,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":17093,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba580967-96a1-4beb-8634-8d3736fbabad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533889,"event_type_id":6,"status":"blocked"}


event_id: a836df93-8fa9-4d0e-8881-98edc1fd1af2
log_level: critical
event_category: detections
event_data:
{"connection_id":5473370,"detection_time":1742533889,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":56521,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 20b53890-7e1f-48f5-89b4-4b32a6a079ad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533890,"event_type_id":6,"status":"blocked"}


event_id: a7ab8db4-38eb-48ae-b7aa-a8229fa00f38
log_level: critical
event_category: detections
event_data:
{"connection_id":5473380,"detection_time":1742533890,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21758,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5eae3076-b0af-4d21-a566-e36e1e7166b1
log_level: critical
event_category: detections
event_data:
{"connection_id":5473383,"detection_time":1742533890,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":22940,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7bd88be-4429-4b00-97c4-38625d037dcb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533891,"event_type_id":6,"status":"blocked"}


event_id: 31b79340-4601-4cff-b916-c13dfad893fb
log_level: critical
event_category: detections
event_data:
{"connection_id":5473391,"detection_time":1742533891,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39229,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ea550eae-5c83-4948-9b0b-f6e316afc013
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533891,"event_type_id":6,"status":"blocked"}


event_id: 3de44431-8138-47be-bc48-fa39559a6341
log_level: critical
event_category: detections
event_data:
{"connection_id":5473393,"detection_time":1742533891,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":63966,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9f87bb55-7dc8-41da-914c-fb4a287c1484
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533892,"event_type_id":6,"status":"blocked"}


event_id: 9bf096b1-ba11-4071-a444-676563b6004b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473401,"detection_time":1742533892,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":29282,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 671b0a3a-eaa2-47fd-8306-f3d5a97cda9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533892,"event_type_id":6,"status":"blocked"}


event_id: a9381a89-6a1b-4707-a885-3ad59c415970
log_level: critical
event_category: detections
event_data:
{"connection_id":5473403,"detection_time":1742533892,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3249,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9b124546-e686-4f67-bb2e-8fa59a25d484
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533893,"event_type_id":6,"status":"blocked"}


event_id: b54eaa27-1f5e-4d77-a9b4-3e8768d073dd
log_level: critical
event_category: detections
event_data:
{"connection_id":5473408,"detection_time":1742533893,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51237,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cb9b7233-aa45-49fc-8a05-1185ae652a7a
log_level: critical
event_category: detections
event_data:
{"connection_id":5473410,"detection_time":1742533893,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52434,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 499431e7-496b-4dc3-a38c-2d305926aab8
log_level: critical
event_category: detections
event_data:
{"connection_id":5473415,"detection_time":1742533893,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54274,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e82cc15d-44ae-4ac8-8572-85a75d1f5051
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533895,"event_type_id":6,"status":"blocked"}


event_id: e301ac59-b0b5-4423-9aa9-56e93e37c205
log_level: critical
event_category: detections
event_data:
{"connection_id":5473437,"detection_time":1742533895,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":53768,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 28e72747-ef19-4798-a966-ffa13d8a56e7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533895,"event_type_id":6,"status":"blocked"}


event_id: f2fd51cb-df5d-4d8d-bdfe-bc618052015b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473426,"detection_time":1742533895,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":55490,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 49abbb93-bf39-4cfd-9301-a513f52c3469
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533895,"event_type_id":6,"status":"blocked"}


event_id: a25e1fc7-0e8a-489e-8c84-4dd8b69b7815
log_level: critical
event_category: detections
event_data:
{"connection_id":5473427,"detection_time":1742533895,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b592d5a8-3340-4a82-9e1e-dd949e2e0c21
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533896,"event_type_id":6,"status":"blocked"}


event_id: 7e9f8659-80e9-4883-9602-d7e29b0ee3e4
log_level: critical
event_category: detections
event_data:
{"connection_id":5473432,"detection_time":1742533896,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":44239,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fb9a9447-f05a-4c23-b27f-cba806a00c09
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533896,"event_type_id":6,"status":"blocked"}


event_id: 424e84f8-bcdc-4eab-9953-e7253bf00c76
log_level: critical
event_category: detections
event_data:
{"connection_id":5473439,"detection_time":1742533896,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":58837,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 991d1962-cfed-4435-bc9a-a230f8621b9f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533896,"event_type_id":6,"status":"blocked"}


event_id: 0fdaa754-a96e-4b69-b2f8-98fda94579bc
log_level: critical
event_category: detections
event_data:
{"connection_id":5473441,"detection_time":1742533896,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62603,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b9bdf7ac-e738-44fa-b1f7-2703716c8a2a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533897,"event_type_id":6,"status":"blocked"}


event_id: bc643e5b-e0d3-4f61-8314-d5a7de9cdb45
log_level: critical
event_category: detections
event_data:
{"connection_id":5473446,"detection_time":1742533897,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":21947,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7739ed57-aba2-42ef-9e0e-286c96e24f38
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533898,"event_type_id":6,"status":"blocked"}


event_id: 61816e63-4600-48f9-9d9a-1e0f0e05c301
log_level: critical
event_category: detections
event_data:
{"connection_id":5473452,"detection_time":1742533898,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64239,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0e5ef172-ddd1-44d0-954c-30918578f468
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533898,"event_type_id":6,"status":"blocked"}


event_id: 1b916904-8a97-4852-a758-ef6f256e3180
log_level: critical
event_category: detections
event_data:
{"connection_id":5473453,"detection_time":1742533898,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":24490,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0fe0ce6f-ead6-4480-a832-8b0626ed83ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533898,"event_type_id":6,"status":"blocked"}


event_id: 62cb1b87-3c9d-40ec-b388-ae99e152afc1
log_level: critical
event_category: detections
event_data:
{"connection_id":5473433,"detection_time":1742533898,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":38889,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ce13d75-01ef-4d1e-ab65-3599bad1184f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533898,"event_type_id":6,"status":"blocked"}


event_id: 2d49783d-a01d-45d9-a695-b4d0fe50db02
log_level: critical
event_category: detections
event_data:
{"connection_id":5473455,"detection_time":1742533898,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":54346,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 39183322-592d-4a73-bfc4-e5456320ec04
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533899,"event_type_id":6,"status":"blocked"}


event_id: 2933e6f4-e167-44d1-a07d-07b47213b491
log_level: critical
event_category: detections
event_data:
{"connection_id":5473458,"detection_time":1742533899,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":4827,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b593ed51-2a0b-40d4-8ad0-42b34f917576
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533899,"event_type_id":6,"status":"blocked"}


event_id: d7859325-faab-43da-a22c-1da3c223be12
log_level: critical
event_category: detections
event_data:
{"connection_id":5473460,"detection_time":1742533899,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":30384,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c872a0ee-2a95-43f5-bc08-d18023780e68
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533900,"event_type_id":6,"status":"blocked"}


event_id: 8f1ac9b8-a1aa-4874-84a6-7ad88d8c4a18
log_level: critical
event_category: detections
event_data:
{"connection_id":5473466,"detection_time":1742533900,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56047,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 474d36d2-51c9-4c06-badf-e17ab5a8fd49
log_level: critical
event_category: detections
event_data:
{"connection_id":5473470,"detection_time":1742533900,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57376,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1da84138-8b46-44d5-9a7b-3c36409d6b5d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533900,"event_type_id":6,"status":"blocked"}


event_id: 45725e01-2597-4bb7-a46c-b3b5320b3688
log_level: critical
event_category: detections
event_data:
{"connection_id":5473474,"detection_time":1742533900,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":61047,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0fa2133f-cea0-4bc8-a3e8-1554e7100381
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533902,"event_type_id":6,"status":"blocked"}


event_id: d2d7c492-f139-48e8-8427-762b735f8903
log_level: critical
event_category: detections
event_data:
{"connection_id":5473496,"detection_time":1742533902,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":17617,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba6ad7e7-0b7a-4560-ad92-b156df31894d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"200.89.178.226","autoblock_timeout":25,"detection_time":1742533903,"event_type_id":6,"status":"blocked"}


event_id: 6f29fc90-6cda-423e-bf11-3fdd8960d869
log_level: critical
event_category: detections
event_data:
{"connection_id":5473512,"detection_time":1742533903,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"200.89.178.226","remote_port":55661,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7c15861-bace-4048-97cf-dbc86e8762ee
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533904,"event_type_id":6,"status":"blocked"}


event_id: 105e938c-86f4-4ad8-8968-9ab335d2ff9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5473501,"detection_time":1742533904,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":50678,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6ee2a00b-a914-4b52-ad68-f82d63e2974a
log_level: critical
event_category: detections
event_data:
{"connection_id":5473509,"detection_time":1742533904,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":55160,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 08a61de4-f742-4a6c-ad0b-c49913b1da34
log_level: critical
event_category: detections
event_data:
{"connection_id":5473510,"detection_time":1742533904,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":55774,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4f3bc486-5d77-4704-911f-18c35841fa80
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533904,"event_type_id":6,"status":"blocked"}


event_id: 292a7060-9bb4-475d-a2e5-0e10cc42e8e6
log_level: critical
event_category: detections
event_data:
{"connection_id":5473514,"detection_time":1742533904,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64013,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 31f6f67a-edcd-4446-9069-6256ed0e6347
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533905,"event_type_id":6,"status":"blocked"}


event_id: 00bbd4f8-d364-451a-bd5f-16186e7887ab
log_level: critical
event_category: detections
event_data:
{"connection_id":5473519,"detection_time":1742533905,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":51529,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b5d2d401-5016-4292-bfb5-6212de891d9c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533905,"event_type_id":6,"status":"blocked"}


event_id: 195689c5-5ff3-4329-a239-76add22c7610
log_level: critical
event_category: detections
event_data:
{"connection_id":5473521,"detection_time":1742533905,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50868,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a6d0dc71-7a03-47a2-af17-b7cafbb327ca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533906,"event_type_id":6,"status":"blocked"}


event_id: d9a42f1e-d4db-4d00-8a1f-c23f73c76fbf
log_level: critical
event_category: detections
event_data:
{"connection_id":5473528,"detection_time":1742533906,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15364,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1a61ae72-d8b2-4ebe-b799-220f84a76811
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533906,"event_type_id":6,"status":"blocked"}


event_id: 2cdcf404-2c2a-4347-a438-543f6f1df85b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473518,"detection_time":1742533906,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49451,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 04859677-b3c4-448e-8d17-0bea81e22ce4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533906,"event_type_id":6,"status":"blocked"}


event_id: 46e627aa-f4a0-468e-9115-4f95ca064b0b
log_level: critical
event_category: detections
event_data:
{"connection_id":5473531,"detection_time":1742533906,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":54887,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c8177a4-7db8-47ab-a6e0-413327a78bbd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533906,"event_type_id":6,"status":"blocked"}


event_id: e605670c-a85e-48b8-807f-84f5a59b927e
log_level: critical
event_category: detections
event_data:
{"connection_id":5473534,"detection_time":1742533906,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":30909,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4a77386a-e2ab-4d04-b609-d8e9a42ff383
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533907,"event_type_id":6,"status":"blocked"}


event_id: 30528e46-bf71-4b07-ac2f-97044d92bfc9
log_level: critical
event_category: detections
event_data:
{"connection_id":5473540,"detection_time":1742533907,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":32695,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 64a26f31-ef14-4cca-9c18-22d85581c2bf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533907,"event_type_id":6,"status":"blocked"}


event_id: 84b28a18-8680-42d6-83ba-edb4b393e4c7
log_level: critical
event_category: detections
event_data:
{"connection_id":5473546,"detection_time":1742533907,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21201,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c2677784-1d80-4b04-9dc9-3ea5bdfa6305
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533908,"event_type_id":6,"status":"blocked"}


event_id: 7cc78117-3620-45d1-b42a-f2bd67591e49
log_level: critical
event_category: detections
event_data:
{"connection_id":5473550,"detection_time":1742533908,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63331,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2b87f0a1-4b00-443c-82b7-b00293ac5c34
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533908,"event_type_id":6,"status":"blocked"}


event_id: 14556231-ed71-4960-879a-6acbf6058d00
log_level: critical
event_category: detections
event_data:
{"connection_id":5473561,"detection_time":1742533908,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":63063,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 42e10cf8-a10b-4290-9064-c033314d8173
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533909,"event_type_id":6,"status":"blocked"}


event_id: 3e5d6e9b-5701-45dd-ac39-0043899d5d60
log_level: critical
event_category: detections
event_data:
{"connection_id":5473556,"detection_time":1742533909,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62688,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1350563f-a963-4d31-9c62-7689d25b66bf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533909,"event_type_id":6,"status":"blocked"}


event_id: 6e9e3402-97c7-471e-8e57-910692890426
log_level: critical
event_category: detections
event_data:
{"connection_id":5473572,"detection_time":1742533909,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":56733,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a51df630-8972-4efd-9a01-c226308c126c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533910,"event_type_id":6,"status":"blocked"}


event_id: 0e4b544a-9599-40a4-bc32-b7d8366e9e52
log_level: critical
event_category: detections
event_data:
{"connection_id":5473569,"detection_time":1742533910,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":44981,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9f295586-a414-4a2e-8478-b513dc41213f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533910,"event_type_id":6,"status":"blocked"}


event_id: ae0a4136-b567-44d7-9ce6-1b51c271d906
log_level: critical
event_category: detections
event_data:
{"connection_id":5473570,"detection_time":1742533910,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64532,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 813527af-5e84-46ad-822d-a80bcf1477af
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533911,"event_type_id":6,"status":"blocked"}


event_id: 43ed1585-01d7-4eb0-9b37-93c7ab08a718
log_level: critical
event_category: detections
event_data:
{"connection_id":5473587,"detection_time":1742533911,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":38459,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ab7e2189-4522-4e9f-b9a6-f8e796a0312e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533911,"event_type_id":6,"status":"blocked"}


event_id: e43aa068-23e6-472c-a40e-fe9d1a970aab
log_level: critical
event_category: detections
event_data:
{"connection_id":5473576,"detection_time":1742533911,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":48220,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 759d04d5-86fd-4a38-9734-7bee52de78d8
log_level: critical
event_category: detections
event_data:
{"connection_id":5473579,"detection_time":1742533911,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":35718,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4c7e93af-91e2-41c3-9e68-a3b25b5bf9c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533912,"event_type_id":6,"status":"blocked"}


event_id: 14d93573-2bc4-4258-9071-38585baf252d
log_level: critical
event_category: detections
event_data:
{"connection_id":5473583,"detection_time":1742533912,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52235,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cbcd97f1-4547-4f4f-bcbc-73ef0eba07e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5473586,"detection_time":1742533912,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53712,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f4727357-24ad-4bd6-9662-936f28090d96
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533912,"event_type_id":6,"status":"blocked"}


event_id: f28d6871-016f-44a3-ae4f-c51567cea88f
log_level: critical
event_category: detections
event_data:
{"connection_id":5473592,"detection_time":1742533912,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":14216,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b155c3de-b783-49f4-993c-26ed81409521
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533913,"event_type_id":6,"status":"blocked"}


event_id: fa48644f-ebec-4606-9e43-960e57fcc0c4
log_level: critical
event_category: detections
event_data:
{"connection_id":5473597,"detection_time":1742533913,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15358,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f70c572f-235b-41a5-90f9-961cb1696dfb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533913,"event_type_id":6,"status":"blocked"}


event_id: a23c830a-6478-45b3-a19b-4487cf07ba78
log_level: critical
event_category: detections
event_data:
{"connection_id":5473616,"detection_time":1742533913,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":21318,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b0d7927e-1ceb-419d-8346-f92dc120ec00
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533914,"event_type_id":6,"status":"blocked"}


event_id: 1eab5989-8e62-40a7-be7a-030d1e346f28
log_level: critical
event_category: detections
event_data:
{"connection_id":5473611,"detection_time":1742533914,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":19534,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b564989f-d89a-49f7-a6d8-70fa956845b5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533915,"event_type_id":6,"status":"blocked"}


event_id: 13dc2181-8ceb-4c73-87dd-1c036a57ae3e
log_level: critical
event_category: detections
event_data:
{"connection_id":5473624,"detection_time":1742533915,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":64630,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: adf6d8db-6346-4d53-8a24-f865d35a8e9a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533916,"event_type_id":6,"status":"blocked"}


event_id: d57f5b9e-48fb-4617-b75c-573e39aca25e
log_level: critical
event_category: detections
event_data:
{"connection_id":5473627,"detection_time":1742533916,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60435,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6cf57ecc-17ac-4350-ba2b-5aada83052d4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533917,"event_type_id":6,"status":"blocked"}


event_id: ea42c925-62fe-48cb-b1ad-3a69d00f847c
log_level: critical
event_category: detections
event_data:
{"connection_id":5473632,"detection_time":1742533917,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62336,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87d7ad94-aaa8-47c9-94c7-39af307a31ad
log_level: critical
event_category: detections
event_data:
{"connection_id":5473634,"detection_time":1742533917,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63571,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1026f999-10a6-46c0-b08b-50fe3d8e5315
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533918,"event_type_id":6,"status":"blocked"}


event_id: 7fb8b400-0482-4d6b-b961-9706ff0d8d0f
log_level: critical
event_category: detections
event_data:
{"connection_id":5473645,"detection_time":1742533918,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":36464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a0bdfc3-5143-47a0-bfac-01fe431b7ec5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533919,"event_type_id":6,"status":"blocked"}


event_id: d89a0b41-c499-47d9-806a-d03dac48e82d
log_level: critical
event_category: detections
event_data:
{"connection_id":5473647,"detection_time":1742533919,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59502,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0d7ae75d-6e47-4f02-a2f7-3af39827f5bd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533919,"event_type_id":6,"status":"blocked"}


event_id: 8fee2cc4-0519-4c2c-8601-2e24e0c046ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5473649,"detection_time":1742533919,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1869,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 50124511-d5e5-4d66-94b5-7a34cf2b0700
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533920,"event_type_id":6,"status":"blocked"}


event_id: 1145a586-bc89-4fea-b37c-f2cbcf0279d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5473653,"detection_time":1742533920,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":3466,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4dd9ff4e-879e-4458-8947-019c501e9fdb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533920,"event_type_id":6,"status":"blocked"}


event_id: fb24c37f-6577-46e8-a3aa-a1dda92dc926
log_level: critical
event_category: detections
event_data:
{"connection_id":5473662,"detection_time":1742533920,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49395,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4dbad3ab-aa47-4b41-b6cc-19ed50f0ad7f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533920,"event_type_id":6,"status":"blocked"}


event_id: 3a19746b-5114-4920-9aff-cfaf46a6b344
log_level: critical
event_category: detections
event_data:
{"connection_id":5473661,"detection_time":1742533920,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62134,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4bf9cccd-f55b-4380-b7af-cca96517bf9e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533920,"event_type_id":6,"status":"blocked"}


event_id: 4812d95f-97f0-4cf6-835f-7bb2e8a088f9
log_level: critical
event_category: detections
event_data:
{"connection_id":5473656,"detection_time":1742533920,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":44191,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ad98213a-ed71-4113-99cc-69f37d1268a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533921,"event_type_id":6,"status":"blocked"}


event_id: adb4200e-ff59-48d1-ad74-5b95c5e57417
log_level: critical
event_category: detections
event_data:
{"connection_id":5473657,"detection_time":1742533921,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19720,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d8e33c4a-c094-435e-a860-12b7f58bb886
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533921,"event_type_id":6,"status":"blocked"}


event_id: e6bc6ef1-5d73-43bd-bfb5-7f7d50917d57
log_level: critical
event_category: detections
event_data:
{"connection_id":5473641,"detection_time":1742533921,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":28985,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a99650e1-8df8-487e-85a0-f10ae6c8a117
log_level: critical
event_category: detections
event_data:
{"connection_id":5473642,"detection_time":1742533921,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":28997,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: be835064-956b-4d5a-913f-dcccfdec5030
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533921,"event_type_id":6,"status":"blocked"}


event_id: e70e4cdd-cf01-4fba-b810-5a740f9d71d7
log_level: critical
event_category: detections
event_data:
{"connection_id":5473663,"detection_time":1742533921,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48086,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 00de2cc1-6d14-4322-b622-1c6764175eb5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533921,"event_type_id":6,"status":"blocked"}


event_id: 883ed094-13ab-4eed-be00-654736feeae4
log_level: critical
event_category: detections
event_data:
{"connection_id":5473665,"detection_time":1742533921,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9456,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 77a5bf95-2407-4faf-9854-d64399a70a5f
log_level: critical
event_category: detections
event_data:
{"connection_id":5473636,"detection_time":1742533921,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":25562,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1fb14323-105a-486a-8442-37de31b15437
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533923,"event_type_id":6,"status":"blocked"}


event_id: 14c37b3c-9cb9-4535-b0aa-7314626058d9
log_level: critical
event_category: detections
event_data:
{"connection_id":5473696,"detection_time":1742533923,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50469,"status":"detected","threat_name":"RDP:BruteForce"}


