# firewall

event_id: df22a588-ce35-47f5-ae88-aeb3cd106237
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":33853,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5052409a-3f59-42bb-993b-1c95ec1593b1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":58144,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dddcf675-5c4d-4f1e-ad39-bcc601c7d6b9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":36213,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cb2d6b1b-3f8b-4f94-afde-e34f3828faed
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":59695,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c1cd26d3-537f-4f34-8137-9cdcc5797b22
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":50000,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 95fb9ca4-d3c3-4867-a5df-b3d2c26f7fa7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":49452,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2238067a-e8f5-4b9f-956a-36d418cbdc7f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":35455,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1da09bef-c24c-4479-89ef-4bd6031a44b6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56320,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 98552377-310b-4d69-ba57-7a9e572d89bc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60152,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 92f9a29f-6839-45d1-9ed1-fe110948c42d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57402,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 16fcfe45-ae6d-4476-8263-9854613798f7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63890,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e2c6d0aa-8c1e-44c1-9e64-7d90d7dc7dfe
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":52282,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 50d0e863-dc27-4cde-b061-d2749051e61e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":49317,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 09826fa6-bb1d-475a-8023-202b85269df7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":65385,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cef3dc56-1262-46e2-a2f8-e4f56a0ed6b5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"255.255.255.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.161","remote_port":38500,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 54f30aa5-d489-4433-8321-e91e384e8163
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50458,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2b62560d-4a9d-47cb-adbb-c9b22d78fb7c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":58953,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0aa4b82d-3faf-4244-a0c3-e5e185b0093e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":65016,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 36bd8195-9fa6-4cb4-a733-efacb1b7bee2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":63454,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bf500f24-d6cc-4511-8a1e-02a90cb1aeb9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":14379,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 764849f5-fcec-453a-ad32-2b48ab8da1be
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":62740,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9e3149cb-a763-497f-ae38-9d6521d73ea4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61941,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9532c01b-93e1-44c3-a153-6f23f083facd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":51030,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: febc35fc-225c-4e32-9bd4-79801682c7e4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"45.227.254.152","remote_port":29914,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8e01264d-f326-4e88-8ada-e9994338fd5d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":16493,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0cfa8c8a-b70a-4643-ae5c-0b41d30a3084
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":34020,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 40ef3f22-c62c-4f91-8030-2f89dcf45ab2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":17698,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 47b95f2b-1b11-403e-ac90-46d25439b890
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":59843,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: abac708d-8fa1-4fbb-87f9-a89fbc597e04
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":58319,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0d317d21-6fd7-4127-b5f1-17a1cd56cd56
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":24287,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3525ff2e-5186-4d03-97eb-ccc29f4ff0c7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":15937,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 96dd7ff6-90be-4980-a13b-0f76af0c8c78
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":16849,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e33a9cd6-f45b-4f22-98b9-ac83de7a2c19
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":62668,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6ade57b0-3ebe-4545-91b1-57aa1a1ccd7b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52189,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d11de858-2a00-4401-a4f2-d649dc221138
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53587,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: decd7937-3bdb-4346-ae09-c912df8dc7dd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":22587,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: db438446-9948-494c-9b1d-497c66dfa80f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":50709,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 00fe715a-a561-48b3-bf02-b6a6bf2fa039
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":53421,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 15a3406a-c6ae-49e9-b23f-5d0c99bc14c5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":55378,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 17ae2e14-76d2-46a5-a22f-28d4bfe05e15
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":38829,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7d89c23f-81e7-4ce4-8f98-049d52b81576
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":58622,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7f3f7ec9-c8f1-4a64-8264-0d97c466f095
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":15864,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 860c8e85-99ad-43d6-8e88-ef77b60e3fb9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":62620,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 355f6399-77f1-4614-9c0c-7e2c328961cc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":19030,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ecde8d93-3a5b-4803-ad86-0c1f65115ae2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59779,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bca99d86-64c6-44e5-ac5e-b9fa5295e109
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":47529,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b3eaba4b-e52e-4174-b84d-923637a0771e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60949,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f6ea68bd-7055-41d2-a969-f22120d26d34
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61711,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 479e00f7-8774-4172-ba55-b5e360b70e6e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62871,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a806262c-d766-4958-a93e-185dcf3fb4c2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":24425,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1942e84c-bbb0-4c18-a35e-6c58f1113676
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"158.69.182.3","remote_port":49289,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e08fa3a6-313f-4431-b91f-36f7f974ad44
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":55283,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 026f099e-246e-4666-baeb-21e03f7f0736
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":29814,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9462b406-4dea-489f-aaab-eee755561e0a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":52343,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9e4af963-e838-4900-ab8d-ead4c76581f7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":58495,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5659142a-0226-43f0-a050-f0e6601f94a0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":11715,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6dbe9239-7d75-4b47-89b0-d926da583454
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":25288,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3d2e6d3f-e9ed-4346-8440-435b17b311bc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":45902,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 43f2b6f7-1be4-4ea4-9a32-c7331d3d9359
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":65276,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5317948b-44e9-4fb8-aed6-4c6a35739cb0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":26548,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0890ba17-2611-42dc-86f0-80d32343f439
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":9461,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ee69ab43-2b91-4b08-adba-96663e74302a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50109,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8c121335-4a70-493a-b355-cbbd4bdb8627
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":48568,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 00cb0c4f-22b8-455f-8bbd-490770fdae3c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":15725,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f323d905-6636-45c6-831a-0182303e207c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":53021,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 15dba102-dcfa-436d-b36d-7f1b88c43d22
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":39204,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: db1e1bed-c9e4-4127-9896-9f689e5facb5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":59181,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 926b8943-46ee-4892-a81a-c23c3ae8c4da
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":55386,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6f2f850d-f6e2-4328-a87f-a92eac364e79
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":42913,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 87dd389e-a3b0-414b-809b-dbf2df55c4d0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56406,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 433da475-ae88-49a7-9f5f-8f05cd7b3caa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57752,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 185dbb73-8c65-4bd0-9568-58c1ecf7f6a0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":58528,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b4746b64-a2dc-4e6f-bc4b-d36b7fbd14a4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61277,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7570fcf5-1ae2-4584-9472-e99541d01d52
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59122,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e6bf511d-78ef-4491-9527-8401285f75fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":30546,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: debe8082-f799-4080-ba41-9c3bf7eb4d01
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":32657,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6b311d6b-1903-42bd-a5b1-2c1ed782826e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54187,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 61ba8f11-ef36-41f3-acbb-775b8460815b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":4497,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 65c3a2f6-f098-47e9-b1f8-b2f7aa183e03
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":6681,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c13f795c-9ceb-411e-9a56-b634d3e61e3a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":7147,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9fd65cbe-2633-49bf-a935-a96695a7e5b7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":59062,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: deb8cffa-4839-4dc0-a015-46a2cda3f104
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":14208,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 319312a3-48fa-430a-a9d8-1484cafd51fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":55303,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9e6482b3-4346-4e98-8b26-0331db542f53
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":16287,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7ca41825-16a1-454a-b943-47020444977d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":56099,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0e978835-91c1-4f39-a034-752fd240d175
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61552,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 28364e77-9ded-4357-a886-da1a7f0bcfb2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":64519,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6c48b4eb-fcc9-4367-8d10-9bf9b4461c0a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62624,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d362f0a0-1e2a-4397-89ca-0c6aca5e7715
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":31349,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d781be36-9104-4add-afd7-53cb30c3c9fe
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":61159,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 34af1994-7372-406f-8fbd-ccdff0cda1c6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":14082,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8b165047-32d8-4332-954e-b6a7435f8199
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":62585,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e6ade50b-7b0a-47e2-8e70-351cd2e4eae5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":38638,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 76cd28d1-c549-4ef0-9a1a-4486cb8ee002
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":4387,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dced1aa0-6793-44fa-a536-99295462f2cb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52709,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 83561261-d20c-45e7-b670-d9da0e687898
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":42915,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 512dafad-41dd-4733-96b1-9c7068ee63b2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60585,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6c86989d-aecc-4913-b3af-815d2c348a07
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54617,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fa889831-3932-4f10-a979-c8add78e8b43
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56091,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3cdb0821-0c5e-4b56-bb65-9bd5c5c53bec
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61287,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 18d6545f-f45e-4f27-b25c-56f6f95488de
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":30738,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4353884f-b88d-491b-8c35-c8905fc683fb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51061,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ed8652b6-3510-4702-b0ee-68d6eb6f321f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":33546,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 67bc1c58-de9e-4449-8556-8bf790d54c76
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":19081,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a23b845b-f21e-45a8-9431-f402c9770263
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":60672,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7025ab37-2b1b-4dac-9c18-0e67b46c77bd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":63845,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d45f60a6-422e-4b2b-ba74-377a8c8c4fdb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":43439,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0a60ca5a-8346-4b90-ba64-f695c3758a6e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":28241,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f41eb214-a3fc-42f6-80b9-6f71b3418f36
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":58238,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 26b58ab0-564a-4d42-a586-bbd1fc857ee4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57887,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8a0a26c2-8007-47cc-bf2b-fbaca803a0d5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":4917,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 05cf3caa-2bab-4c81-9316-ffafc3b00789
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":58921,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7244396f-efff-4c3b-99c1-5f2674eabd70
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":35872,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ba3a4fe5-c873-4db1-8860-15d399344206
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":51531,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 82dc2e18-953a-4ba3-aeaa-f3e3cbfdee99
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":56760,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 39eb3e3c-a9c9-4af9-9f97-e4a83ab8edf8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":46194,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9c4d25a3-4eb0-47be-8953-67fbfc205d6c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":65379,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c953c433-3b50-47bc-93d3-9944cf5f9b5f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51027,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a34ded0d-d5c6-49c9-88c9-1e6dab0c4416
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61064,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 558d97bf-dd69-4fad-94d4-9f41f5a9586f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52776,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 69c7ef7d-2162-4378-8824-14ba46f9eb3a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":26336,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 92787678-d68d-4ee6-9597-7fd580585bf5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61650,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 47ae8d02-9953-45b2-9278-9664fe7e46c1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":5587,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 72706cc0-864c-4077-a5ec-975f5ce3abbc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":54710,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 50b145b3-d856-423b-9ba0-885f56cb5978
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":29261,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d2b2b266-9b3f-4ea2-895c-2ef3159bd0c4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":7085,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 00cce274-613e-48c5-bca5-6ebd5103d912
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":57951,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b0c11660-e465-4381-af59-023b2ef381a9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":64014,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f885de2a-5e3d-4113-bb86-ff9376f39b3c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":55834,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: af6c792f-eeca-41f7-8100-7f75ac45bd8b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":60543,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: eaa37ea0-12d6-4530-a97c-c9b5b6697187
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":62679,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c93719d4-f01c-476e-9ff3-0b44cae778dc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":20056,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 551f4302-d2d0-4a1b-8187-66ab1eb28154
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":60943,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 265dd4e2-1571-4d33-b2e2-8410e00c3893
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":23165,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e5a17cb7-312d-415d-bd5d-16117000d243
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":10862,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7b722d05-e3ad-4591-8634-50dd8ab27d51
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54590,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3a63f0d2-cd69-4d12-b326-41ffad1d89b4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":55844,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a5476dbc-dbf6-4a40-8026-f2887efbf329
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":13254,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 878a0cf6-d43a-4437-901f-a104269bb21f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":61192,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3cedca4e-c368-4e14-9099-f97b2c34dc5d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":65047,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 17d268d5-1a8c-458c-8c41-31d296923763
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":58968,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 441a2fb1-412f-4bbd-874f-3dc39543960d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":39349,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fba4cae2-24db-4468-a6da-3bbdb1e844c6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":61183,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 21bcea4b-a650-44b1-a1c0-0a4a85cd4f2d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62097,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 48aac13a-071f-4a9c-b0e6-c83ee520400d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62933,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 87596f02-b2d0-488c-9879-09cbf757c013
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":64710,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d53e7e95-5c68-4d3d-b267-856767b49b15
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":10760,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9b6c0079-6ef8-4845-90c5-96da4db5402e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":65403,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6aa6133e-fe83-4bc0-85a0-971d3d7ea48d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61047,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 000b4ae1-485a-4a01-8071-01fd36c5a83b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62554,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 253762de-17c0-4d04-8a0c-c81d3d38c113
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":60557,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 738d4c05-ecca-4061-ad78-2da08987182f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":11626,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ee52eb7f-0f26-47cd-b030-0d9a07a73bbb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":41385,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 30345065-f2ec-4df3-a47d-233bb1f97876
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":42619,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 22349d2e-3859-4b3c-baae-af352ccdac5a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":58988,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 750e6745-59da-443a-a621-2e47af8d6a79
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":19026,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c93e1076-85c0-465b-9abc-bcdd424a7418
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":49089,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5eabf934-9220-4453-a54f-c7ea87055c4d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":23115,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: aca8c557-30ec-4e0c-a35c-5b085b2df039
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50732,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: eb80ddc6-c2fd-4882-902e-c8d007f332fd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52006,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 112ddae2-4c82-4d3c-aa38-bb05937b5ff3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":10852,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 63f65345-932c-464a-9bae-b7fc0afd8432
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":50877,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b1235bc3-e0c9-4e6f-8b3e-f9ff9e8a4cf4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":13745,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c5bbf19a-c00c-43be-a20b-a69dc7072ab2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":64116,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4bbd51cd-d11f-4c6b-a584-4e7c02c84726
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":32541,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cf532bf6-5abb-4b8c-8589-ed3d682b4748
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":41439,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c566072d-5849-487c-bce0-78d3fb71d17d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":33702,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a7ab9836-e7f7-4941-8b89-e6349eac0953
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":59658,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5c1c97e9-b1de-442b-860e-c014c208cd66
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":64121,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3625d425-b549-4dc1-934d-c73825db4488
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":44275,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a845c754-c40f-475f-93a6-d25d38ec6306
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":58152,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 27f49ff2-e389-4bf2-80ab-1cc631f9b0e6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":9110,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 77dae790-b0f0-4d0b-87b3-69e800fb6d07
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":24017,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bd8b9231-64ac-4b33-8ac0-3413caf7386c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59724,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: eb7cd9df-32fb-49a7-9d70-45a8f59d0e1b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61897,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4c3c55fb-1590-4a69-94ab-870c8be9bf9d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":49896,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 59d53b48-a9ca-4e94-b66f-7ba5005d05d3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62000,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 28c855a8-edc5-4531-985d-413bf717b0bd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":16212,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3b804588-48c6-4c83-869f-4e9458d02feb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62674,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 30a64adb-95b0-4185-a579-84751ddd1227
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57219,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 01a58b17-5f65-4bdb-a014-f54d7a64f19a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":49860,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2fdb20bd-0bca-4b9a-a118-37c2bd0ae2d4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":50141,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a1f5cc97-82a2-4b9e-b1bf-2e0b2139ce80
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":37064,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d85f1c66-b43a-4676-93f1-941072a11da4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":6634,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4f26e151-18b2-4240-92b0-b09bd75d9a04
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62772,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0535bd13-b7e7-473e-aab5-9dc5e8038d2f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":34787,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4e6cc530-111e-40cf-a418-bbf5380ee6b2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":64297,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c1090486-745e-4277-a088-7ecb0a706f41
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":9926,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 59c50ba3-3b27-4457-b146-1516b0b2852f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":50497,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4a6fbfd3-a66b-4c9d-afe2-57537127706d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":52101,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3e253aaa-7dfa-4aa3-9dd6-d54d00f8f218
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":41109,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6d5a5737-1d75-4878-a391-83b816482d7d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":57763,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 46657fac-e63e-4b5f-9113-1a546bfb84ad
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":64770,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fb788846-1b77-4e44-bd4a-88cb41331fd9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54503,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 76083748-3159-4ce8-8a63-40b66257a30c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":55740,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9fdfa365-aeb3-4bb5-8286-a2329c52245a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":3511,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a8e6e833-e23f-4407-a288-ed8be12c1ba9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":58309,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 844072a7-b446-4966-aa7c-330ae99d9daf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":55688,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0da59fe3-eba1-4c20-8e47-31b25db14ce2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":50837,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ef85494f-97ae-48a0-9833-2a1a54f4f546
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":58288,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 902192ed-7771-495d-a9d8-e4e86c7a4281
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":56698,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9da47a01-f0cb-47d4-8214-5da28921ae37
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53645,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d9ab0b95-9e81-4c34-ac81-dd4201ea4e5d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62217,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0b8e781b-7c74-4362-b5b8-be1a69e86c8d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":39325,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c3624169-a527-4003-93c1-2617c3e21ca8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":41043,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 65c8e8fc-1401-4851-b29f-76be0c639f72
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":63560,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c31316ea-cdbe-45cf-bc5c-84d7b67f41d5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":19733,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 081c31d4-651e-4272-856c-bb60c5bf722d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59512,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 02434d88-b1f6-457e-8a4c-fb0262aa1e7e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61115,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 82b5e383-9e89-4676-939c-67e8c9b6e5af
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":61201,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 173ee2e7-0a6e-4b29-aa55-c891082b9646
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":56521,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a57ce763-26ef-48d8-91fc-d0a5b6723d9f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":17093,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9744e769-0482-48ae-9afc-242960eb1557
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":21758,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 124f5c1a-480b-4f1a-aff1-86f2bbcc7707
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":22940,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3b9ba6c8-4f96-4066-96ee-3c7782f599ca
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":39229,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 652b21b0-dedc-4f1f-a067-0cabe80b3be1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":63966,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 033a0960-491d-47ce-8e93-461b77a96a46
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":29282,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 52b600b0-7345-4238-8531-ed3a82b9b521
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":3249,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 89625ac9-0ddb-4907-aa17-33506c126ad5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51237,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0a968c11-add0-4e17-8c08-0178aa051833
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52434,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5a59aa73-19e4-478e-91df-5e561e14408f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54274,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a39cc981-4cc9-44c4-adbf-bd93336a739b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":49939,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e690c410-4506-449b-bf12-45f1cdcad73d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":55490,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5fbecccc-a25b-49ef-9624-c145147cdfc5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":38889,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: babf6d7a-8842-4972-bd93-130fa1012509
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":44239,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ad0e4095-1a4c-4d64-a3b5-deaa1eb92ced
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":58837,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f2b119f5-7a4b-495e-a69a-37d38882d7e6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62603,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ea9e4764-2240-4799-a35f-09f2cffa1dcc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":53768,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b5033f7d-eb62-4b69-bd98-48d04ced362a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":21947,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ca6447c0-cab3-4e12-9edf-ae5fc593f6f3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":64239,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0e91b314-90f9-479f-9b96-c675cbd0f8e6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":24490,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f8dcfbff-fa8c-4feb-a51a-03ecdbae2259
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":54346,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ba02b210-9393-42c5-bac6-4214ec41d092
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":4827,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ad54210e-3f00-4884-b4c3-ba0ec79c8dd2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":30384,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e0f44fd3-606f-4806-8cd0-ede799c0e9de
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56047,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0a38fdc6-4f38-458a-99d7-1595ad249bb9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57376,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6d28c5b7-48fd-4f76-865b-3d19f5229f73
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":61047,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9c08d353-ec6f-42de-8dc0-a36c5a013a10
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":17617,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3897967f-8f91-4b84-8891-eab61355b4e5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":50678,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7bc4b856-7b7d-4976-ad67-dc5d85e7c09a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":55160,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b5f64c59-1dc1-4476-a6ac-fca04cf90d8e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":55774,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cedad08f-c63b-480c-b273-99860694e857
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"200.89.178.226","remote_port":55661,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e14c82b5-f97e-45bf-a5ce-5e0b4920a408
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":64013,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2830f24e-36fe-4911-9adc-38394eb363d6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":49451,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 128fe022-ccab-4bfc-a2e0-5dba34c83a53
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":51529,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b2f40d23-e67b-40ac-8c1a-eac56f5dcae3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50868,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 83ea491e-08d5-486d-b10f-ca69b295e6e7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":15364,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0f18476a-f0ae-42ec-a2c6-c3ddc414ac05
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":54887,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ae4329a7-7e97-4735-a08a-b3e77fcbffa0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":30909,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7aa45607-fcaf-4348-a10a-36bc1c0b03b5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":32695,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 22c84285-f9fa-4f47-8495-de6f0e2c57e3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":21201,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 593f71ca-a7d3-4264-adae-b406fb86f80d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63331,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5d39445f-01e3-4d96-9134-7ced6f41823e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62688,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d8a2ec45-96c8-41e0-ba65-d42ae9ccaba6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":63063,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 941ca2aa-144f-4197-8568-2d4f921046c1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":64532,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 267c8b1e-c04d-4abb-b0da-d71df4a2bda4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":44981,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bfad2a35-5b7c-4de9-a183-eb77186e6e27
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":56733,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c2a80cb5-46e3-412a-b797-bf7925867341
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":48220,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6e9b7b7f-ba65-49ed-8b4e-6589ea03a1e9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":35718,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3756cc18-9d69-4ffe-aec1-21afdb938822
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52235,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e91e5de7-65f1-44d0-a718-a153e3732686
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53712,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9505c16f-cc50-45a6-9fb8-e571cf8b7ed5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":38459,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9abc21c0-1f9d-4486-b27c-7317c2d836ac
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":14216,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 608e7e05-5ffd-4342-90fd-34ae52a08849
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":15358,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fe410fdc-a968-4fc1-af25-a756486d6244
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":19534,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5e33b119-d521-4967-9346-f2736c61da08
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":21318,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0d49d95f-edf2-4e73-948d-948b36179083
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":64630,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6e34558c-136d-40d0-b84e-4d4bed65e1ec
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":60435,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7c3023f5-45cc-4f7f-a63a-b64e33afe0e0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62336,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bc411e34-d372-47ad-b455-b2b1ded3d2e0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63571,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bd55284e-3950-4ec5-916c-616c2bf2947a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":25562,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b157bf42-ce84-425d-856f-e2facde842ad
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":28985,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fff5b11d-8f35-49ce-8206-97e4b94168ee
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":28997,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: de1191e2-357f-4365-a37a-d8031595ae28
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":36464,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9d2d7e5f-b579-44f2-9f5d-84a91482ca92
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59502,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fc964e6b-b369-41ee-98b0-498f4c00e95b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":1869,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: df459f6f-a8cb-4c1a-9620-be3da94029ce
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":3466,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7c73d4e6-3128-41e1-b97f-09fde9a3c6b7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":44191,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0fa1db22-d82b-4907-b7ac-d20172252c3d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":19720,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 88dde5ac-e58c-4c85-9000-3082889b35b1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62134,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d119c659-ba06-4ef8-bd58-d09a5d7fe582
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":49395,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 679d7cff-d19e-4912-bbac-211836de4641
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":48086,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a08c2082-bba4-4bc9-a48b-8b5b4d33e69c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":9456,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 033bd02a-a4e7-4458-91d7-d740dedc9a19
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":49305,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6a7ab5da-15b4-4574-8554-20c2f146e331
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50469,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 473240f3-1bbd-4085-865a-4c7c4c1d81d9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":59668,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b17b24c2-1d87-4bba-9438-131fdf23c034
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":50615,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b45a87b1-8ce0-4840-828c-ce8fa9806af1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":35652,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 12f19b72-65bf-4470-b60a-1290e691e77e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":24575,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2b118b51-73c1-467c-a1c1-fc68d1bdf369
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":38972,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1ef100b0-c4b6-417a-9b38-eedd9d5e2f4f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":2140,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1b826e8f-1d51-4419-a5bb-6133dda9703b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":4945,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


# intrusion_prevention

event_id: c7af6d1b-7dac-4592-9b0e-563643e40a4d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470214,"detection_time":1742533444,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61177,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 254e22ce-9609-4682-b1ae-22adcd700a8c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533445,"event_type_id":6,"status":"blocked"}


event_id: 8bda4f2d-838b-478b-bd36-82ea64df2f78
log_level: critical
event_category: detections
event_data:
{"connection_id":5470218,"detection_time":1742533445,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15093,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: afdf1f36-a1a4-4d1b-9562-56370f7a8f67
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533445,"event_type_id":6,"status":"blocked"}


event_id: f181d640-073b-4e93-854c-d48d7cc57d94
log_level: critical
event_category: detections
event_data:
{"connection_id":5470226,"detection_time":1742533445,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":57072,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 84340055-cdcb-4301-80b5-ab5eec92d0c0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533446,"event_type_id":6,"status":"blocked"}


event_id: ff85aace-6df9-4df2-a061-b9fc8b48ba38
log_level: critical
event_category: detections
event_data:
{"connection_id":5470220,"detection_time":1742533446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55765,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f39eb41d-e3f1-4697-8c87-a073f5f966ce
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533446,"event_type_id":6,"status":"blocked"}


event_id: c1670df7-0e9b-4286-8d8b-de4937907e7e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470229,"detection_time":1742533446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":51851,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 49a54f6b-b7d9-470a-a990-230c66a26d0f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533446,"event_type_id":6,"status":"blocked"}


event_id: f6240683-9619-4574-9e94-eb4aedafb216
log_level: critical
event_category: detections
event_data:
{"connection_id":5470221,"detection_time":1742533446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58118,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 46d42dbe-92bb-45ae-b3b4-02841b74af61
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533446,"event_type_id":6,"status":"blocked"}


event_id: c5db34e1-9589-456b-b79b-23e9fc761e03
log_level: critical
event_category: detections
event_data:
{"connection_id":5470225,"detection_time":1742533446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":59186,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: be0329c5-29f8-441a-9934-7509432841d8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533447,"event_type_id":6,"status":"blocked"}


event_id: aee26ae0-4f98-4e88-bbd8-98717039daea
log_level: critical
event_category: detections
event_data:
{"connection_id":5470228,"detection_time":1742533447,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":60115,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03c60bd3-104b-42d7-8ab8-12f704083859
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533447,"event_type_id":6,"status":"blocked"}


event_id: 106c5668-20ae-4ba1-8f10-aacde9e6bbe1
log_level: critical
event_category: detections
event_data:
{"connection_id":5470231,"detection_time":1742533447,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":29206,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 94362e6d-6cc4-4059-8522-7f1f0541ee93
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533447,"event_type_id":6,"status":"blocked"}


event_id: e340453c-039b-4f43-81ce-5f615a39901d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470232,"detection_time":1742533447,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":27656,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 61191e4a-d3cd-45e7-8a84-08d73a6cd9cb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533448,"event_type_id":6,"status":"blocked"}


event_id: 69f618c1-738e-4eb3-b6a4-f371e151d7fb
log_level: critical
event_category: detections
event_data:
{"connection_id":5470235,"detection_time":1742533448,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":29556,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b57aaf55-9c09-4d94-a0f4-46b048e1d73b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533448,"event_type_id":6,"status":"blocked"}


event_id: df7ac4b3-19bf-4994-80bd-780bf5700ac3
log_level: critical
event_category: detections
event_data:
{"connection_id":5470237,"detection_time":1742533448,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1402,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c646794a-8f63-4487-9b6d-fb03c3fbb381
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533449,"event_type_id":6,"status":"blocked"}


event_id: c9c3d4c6-1ae0-450c-afe3-6f15d686dda2
log_level: critical
event_category: detections
event_data:
{"connection_id":5470240,"detection_time":1742533449,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":35724,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82229017-74bb-4c0a-94a0-a13f2bbc57f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533450,"event_type_id":6,"status":"blocked"}


event_id: 0001c2dc-9969-4553-ab4c-5eaf66547394
log_level: critical
event_category: detections
event_data:
{"connection_id":5470242,"detection_time":1742533450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":16941,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f9f437f-9bad-47be-a015-a97862b73038
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533450,"event_type_id":6,"status":"blocked"}


event_id: 27c20f7a-5e8e-404c-8d0f-a94415ceb5e7
log_level: critical
event_category: detections
event_data:
{"connection_id":5470244,"detection_time":1742533450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61428,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 36af39b9-7271-4815-909c-0e667d8d2f98
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533450,"event_type_id":6,"status":"blocked"}


event_id: 03af03b5-e53a-49a0-b665-125aaa5b7bc8
log_level: critical
event_category: detections
event_data:
{"connection_id":5470246,"detection_time":1742533450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":38970,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 721a86e7-784a-46b7-8fc7-e229dd542f45
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533450,"event_type_id":6,"status":"blocked"}


event_id: 03ef1b9d-8984-441a-a6b8-a2ce31b61ee9
log_level: critical
event_category: detections
event_data:
{"connection_id":5470252,"detection_time":1742533450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":65516,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44dc838d-abf6-40da-8554-767f63d53ab9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533450,"event_type_id":6,"status":"blocked"}


event_id: b8a95959-c6c7-4108-a3fe-c787dcf9d70d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470250,"detection_time":1742533450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":41637,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fd51952c-225e-4cd3-bc15-8c8b175958af
log_level: critical
event_category: detections
event_data:
{"connection_id":5470248,"detection_time":1742533450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63220,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1206c78a-04fe-48dc-aa9e-2eab8b5971b0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533452,"event_type_id":6,"status":"blocked"}


event_id: 5d1d7377-9e51-40ef-acb5-4cf155bc9f2f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470255,"detection_time":1742533452,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15303,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6e8288f1-4742-48b4-ac92-cba8c0a03031
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533454,"event_type_id":6,"status":"blocked"}


event_id: 14c04c53-b530-4f4b-8ad5-89755f1e375b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470274,"detection_time":1742533454,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":53131,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b50ad8ab-6676-4180-ab35-eb7cc9a077f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533454,"event_type_id":6,"status":"blocked"}


event_id: a066c566-df93-4956-a2b4-055468f32336
log_level: critical
event_category: detections
event_data:
{"connection_id":5470282,"detection_time":1742533454,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":24573,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6aa3a77e-e8db-4836-ae75-d996c92e76d4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533454,"event_type_id":6,"status":"blocked"}


event_id: 56e397fb-6af7-4ef6-82f9-891070bb9669
log_level: critical
event_category: detections
event_data:
{"connection_id":5470284,"detection_time":1742533454,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":57033,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ccc8d3a3-532e-438a-8881-1d641038c25b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533455,"event_type_id":6,"status":"blocked"}


event_id: 91965189-59ba-4e87-9e49-c1903297e5b1
log_level: critical
event_category: detections
event_data:
{"connection_id":5470289,"detection_time":1742533455,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53410,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65f3f14a-1d48-4c3f-8e96-4b6aa0a3b70c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533455,"event_type_id":6,"status":"blocked"}


event_id: 5335ff32-d109-46fc-a4e2-4299fc48ae7b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470294,"detection_time":1742533455,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":59483,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 420ae50f-e563-4a88-8be5-2d306df164c0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470293,"detection_time":1742533455,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55290,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 30b96484-d4e5-403e-a49a-4b3256cd2f6f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533456,"event_type_id":6,"status":"blocked"}


event_id: f6a4e8b4-afdb-40df-a076-4a41ebeecab1
log_level: critical
event_category: detections
event_data:
{"connection_id":5470297,"detection_time":1742533456,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57759,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 72a3be17-ac4d-43e0-b14a-06910d02a88e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533457,"event_type_id":6,"status":"blocked"}


event_id: 896e710a-4bed-4e3f-8b72-5b1f1f215e79
log_level: critical
event_category: detections
event_data:
{"connection_id":5470310,"detection_time":1742533457,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":50712,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 394527ff-be5b-4268-8019-618e4a8f83cd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533457,"event_type_id":6,"status":"blocked"}


event_id: e6992388-9db9-4297-84de-37023dd145c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5470306,"detection_time":1742533457,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":33724,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 20e7fcc4-638b-446f-8c1b-cce4ae20f39d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533457,"event_type_id":6,"status":"blocked"}


event_id: ab8e5a2c-9f36-4f15-bd5b-2a23149f11f2
log_level: critical
event_category: detections
event_data:
{"connection_id":5470261,"detection_time":1742533457,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":27752,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 36db0d3f-4b27-4aeb-af16-bf6168cc2236
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533457,"event_type_id":6,"status":"blocked"}


event_id: cbb7fa36-88cb-485a-a6a7-92fe9e09cebe
log_level: critical
event_category: detections
event_data:
{"connection_id":5470307,"detection_time":1742533457,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":1541,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 76e3b395-ef95-4c52-8c4a-15d1894d83d2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533458,"event_type_id":6,"status":"blocked"}


event_id: 6e2bd36c-ca51-4646-9919-ccba112b49d6
log_level: critical
event_category: detections
event_data:
{"connection_id":5470315,"detection_time":1742533458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58700,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3920808c-d51c-4588-ad11-5b5b19ffbb04
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533458,"event_type_id":6,"status":"blocked"}


event_id: 86be9b51-c5e6-4eac-9068-464012b155b1
log_level: critical
event_category: detections
event_data:
{"connection_id":5470312,"detection_time":1742533458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52333,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0b59fb3d-2bb1-47c0-8ca3-87ad9f350c7a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533458,"event_type_id":6,"status":"blocked"}


event_id: 5005e5b1-14c1-444e-95bf-95f782a03c9d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470314,"detection_time":1742533458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":2904,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1fbe51f8-5089-444b-ba44-983106d03862
log_level: critical
event_category: detections
event_data:
{"connection_id":5470317,"detection_time":1742533458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":4426,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9458f54d-5277-4574-9d2c-237ee8b6752c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533459,"event_type_id":6,"status":"blocked"}


event_id: dbfc43fb-4478-4d9d-99db-6ffaaa28e1d8
log_level: critical
event_category: detections
event_data:
{"connection_id":5470324,"detection_time":1742533459,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":62547,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 319b4382-0053-428f-be22-581f636ca2f9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533459,"event_type_id":6,"status":"blocked"}


event_id: ecc5d70d-574a-4ee2-81f5-b313801b3f05
log_level: critical
event_category: detections
event_data:
{"connection_id":5470326,"detection_time":1742533459,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":60007,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 720f95ad-4235-4d7b-a849-904be3c9ace0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533461,"event_type_id":6,"status":"blocked"}


event_id: 2b6a732a-6a47-4cd6-baf3-16ed585ce68a
log_level: critical
event_category: detections
event_data:
{"connection_id":5470335,"detection_time":1742533461,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59868,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b29f57df-1aa2-4b9a-be62-696b9cf5d40c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533462,"event_type_id":6,"status":"blocked"}


event_id: cba0aa48-71f4-48a8-a9c8-a85aad31bb28
log_level: critical
event_category: detections
event_data:
{"connection_id":5470332,"detection_time":1742533462,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":51509,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f4bcd139-5653-4fc4-9a73-9d32b179d9fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533462,"event_type_id":6,"status":"blocked"}


event_id: 24d9bed0-54b8-4667-adf2-68cceebcceca
log_level: critical
event_category: detections
event_data:
{"connection_id":5470333,"detection_time":1742533462,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":16866,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 833297bf-38a5-4e99-b967-feadc5613e9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533462,"event_type_id":6,"status":"blocked"}


event_id: 4c7c02d9-2b71-40fd-8620-a77c208599d5
log_level: critical
event_category: detections
event_data:
{"connection_id":5470334,"detection_time":1742533462,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58361,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 719e5ef6-9818-4840-aee7-605dc4776b88
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533463,"event_type_id":6,"status":"blocked"}


event_id: 4ea104d9-de62-4cf2-bc23-9236b96eaf4c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470341,"detection_time":1742533463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23590,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4625c99d-e650-4aa6-aec3-48d92598aaeb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533463,"event_type_id":6,"status":"blocked"}


event_id: 5116aae3-ef43-49ed-b887-5252a4a13ae6
log_level: critical
event_category: detections
event_data:
{"connection_id":5470342,"detection_time":1742533463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":21256,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 210373d1-00ee-4540-839b-6ca54e3b6a5a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533463,"event_type_id":6,"status":"blocked"}


event_id: 47dff6c2-890d-4121-bb4b-0c7b0efe9f56
log_level: critical
event_category: detections
event_data:
{"connection_id":5470343,"detection_time":1742533463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":57336,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b56dac24-ee2f-4c06-bd8e-7d1b2889f5b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5470345,"detection_time":1742533463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26282,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b22f98bf-6967-4ecf-a808-201ef66fe73b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533464,"event_type_id":6,"status":"blocked"}


event_id: 9396952c-833d-48f3-8995-2d1598fbf13e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470344,"detection_time":1742533464,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":49261,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b08b19d-3489-4a81-b905-aa9d97277f10
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533465,"event_type_id":6,"status":"blocked"}


event_id: c0908e73-73b8-44d4-bed0-4ede02e84459
log_level: critical
event_category: detections
event_data:
{"connection_id":5470352,"detection_time":1742533465,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":58273,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de82f4f1-3749-4b20-9858-3fefdcb05e33
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533467,"event_type_id":6,"status":"blocked"}


event_id: db17db5d-5f99-4e9c-b5a0-6e8da9fad982
log_level: critical
event_category: detections
event_data:
{"connection_id":5470355,"detection_time":1742533467,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50383,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7a601d67-9a6e-44e3-a808-63ab01eabd67
log_level: critical
event_category: detections
event_data:
{"connection_id":5470356,"detection_time":1742533467,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51365,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6debb8bd-72b4-46d8-bfa2-fd421a194b27
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533467,"event_type_id":6,"status":"blocked"}


event_id: 830aa72d-b46c-426a-93d1-20809c337e43
log_level: critical
event_category: detections
event_data:
{"connection_id":5470370,"detection_time":1742533467,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":11801,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fbcf5559-e137-4eb6-998f-12ead48407c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533467,"event_type_id":6,"status":"blocked"}


event_id: 191d4d5e-7350-4a39-a910-47f143f2e2f4
log_level: critical
event_category: detections
event_data:
{"connection_id":5470362,"detection_time":1742533467,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":37719,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65ad39a8-f8f0-4e4d-8ec7-3ae11576ec52
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533468,"event_type_id":6,"status":"blocked"}


event_id: afe9654a-359a-4e99-b6b3-2063ca9eac3d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470363,"detection_time":1742533468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53653,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58667685-917c-4151-809a-ae86d1d30ec7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533468,"event_type_id":6,"status":"blocked"}


event_id: 88d4fc7e-a195-4dc2-b2a2-c0d62c725cab
log_level: critical
event_category: detections
event_data:
{"connection_id":5470367,"detection_time":1742533468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9037,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 975f78dc-cc2b-4fde-aecc-d5a31ce57975
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533468,"event_type_id":6,"status":"blocked"}


event_id: f018335b-cf65-4124-8b74-70b45ef536b1
log_level: critical
event_category: detections
event_data:
{"connection_id":5470350,"detection_time":1742533468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":56566,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a1c6c979-4a88-4cd4-87f3-cd39299c3b9d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470366,"detection_time":1742533468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":1644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69d72db3-4c46-48f6-bd86-c02d23de7967
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533470,"event_type_id":6,"status":"blocked"}


event_id: 2f5d3f12-35ee-4213-b5bb-b06f82c5a687
log_level: critical
event_category: detections
event_data:
{"connection_id":5470381,"detection_time":1742533470,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59299,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3c7b537c-abcb-42d7-8674-b3a99df63823
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533470,"event_type_id":6,"status":"blocked"}


event_id: cefebc40-52be-42af-bcb5-a0ae6debda71
log_level: critical
event_category: detections
event_data:
{"connection_id":5470372,"detection_time":1742533470,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65201,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ef284e12-5080-478e-8845-35ae7d54893f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533472,"event_type_id":6,"status":"blocked"}


event_id: a7097f3c-2627-45c9-8639-16d98e161a6b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470389,"detection_time":1742533472,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":61049,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fd477188-c100-4842-8132-9e6e94438aa0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533472,"event_type_id":6,"status":"blocked"}


event_id: 704c2b27-5358-48be-af10-2b7445e70925
log_level: critical
event_category: detections
event_data:
{"connection_id":5470390,"detection_time":1742533472,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":58354,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 045a3b8e-eb7f-4ee4-ae7e-f3cd23b14a89
log_level: critical
event_category: detections
event_data:
{"connection_id":5470388,"detection_time":1742533472,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":57846,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ddb546e-52c8-48b8-bb74-ae1f48dbbab9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533474,"event_type_id":6,"status":"blocked"}


event_id: a4152178-b257-4ca6-a5b8-bf2532d42327
log_level: critical
event_category: detections
event_data:
{"connection_id":5470399,"detection_time":1742533474,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":62958,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f29d219d-643d-4de7-b743-f9884fb58dee
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533474,"event_type_id":6,"status":"blocked"}


event_id: 18d836aa-d807-443d-ae1f-b9f48e4a6d5d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470394,"detection_time":1742533474,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55021,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 68d07651-c11d-46f8-bd1a-1eed033c3871
log_level: critical
event_category: detections
event_data:
{"connection_id":5470396,"detection_time":1742533474,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56391,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a5fe1e5-52cd-44bc-a92e-7783e5ef310e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533476,"event_type_id":6,"status":"blocked"}


event_id: df39a8b1-9130-4f7c-9c22-a1a2c01b7997
log_level: critical
event_category: detections
event_data:
{"connection_id":5470404,"detection_time":1742533476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":49914,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eb97bd41-8101-4894-8462-85c9530d1bc6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533476,"event_type_id":6,"status":"blocked"}


event_id: 99253925-4e79-4dc7-a149-7a6de96c32ad
log_level: critical
event_category: detections
event_data:
{"connection_id":5470406,"detection_time":1742533476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":39264,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 15e93461-9c8d-4a05-8c4d-0f3ae8ed91aa
log_level: critical
event_category: detections
event_data:
{"connection_id":5470408,"detection_time":1742533476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":40276,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b85a0a18-0ef8-4286-8652-c59dc5e96ae7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533477,"event_type_id":6,"status":"blocked"}


event_id: 5c72589f-e67c-4d51-8d1b-016a912d20f9
log_level: critical
event_category: detections
event_data:
{"connection_id":5470411,"detection_time":1742533477,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":9385,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af167dbb-804c-46ec-bee3-de3a855adbd8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533477,"event_type_id":6,"status":"blocked"}


event_id: fb528a43-65b2-4996-918d-ea210a3c816c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470414,"detection_time":1742533477,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8417,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1dc4e3a4-799a-4367-8b21-2e44c5d72d51
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533478,"event_type_id":6,"status":"blocked"}


event_id: ac013b5a-27ab-48df-925e-aaab13470367
log_level: critical
event_category: detections
event_data:
{"connection_id":5470415,"detection_time":1742533478,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":10115,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fcb04d24-bbb9-4c92-92b8-7f1f1e981321
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533478,"event_type_id":6,"status":"blocked"}


event_id: c331f970-5b93-4e4a-a4e7-b8439ff01f32
log_level: critical
event_category: detections
event_data:
{"connection_id":5470416,"detection_time":1742533478,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":46464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ef4b64c-f9de-4220-a5f9-11724c758931
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533479,"event_type_id":6,"status":"blocked"}


event_id: 27ee9ad8-4744-4d03-a7ca-50a95f939eff
log_level: critical
event_category: detections
event_data:
{"connection_id":5470421,"detection_time":1742533479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":16037,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d236ae94-cef2-410d-bb9c-e44a791c05fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533479,"event_type_id":6,"status":"blocked"}


event_id: d0991cbf-c2a1-4afc-9585-f5295d0a7b7f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470422,"detection_time":1742533479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63063,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a8acbfe3-eddf-4431-a0d5-2be5df98e515
log_level: critical
event_category: detections
event_data:
{"connection_id":5470424,"detection_time":1742533479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65056,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69c0292d-400e-4310-9c78-9e10ca5b212d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470425,"detection_time":1742533479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50084,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b1d663e5-5a42-4edd-973e-285174a4bd5b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533480,"event_type_id":6,"status":"blocked"}


event_id: 088c1469-399c-482d-928d-666ea3153801
log_level: critical
event_category: detections
event_data:
{"connection_id":5470432,"detection_time":1742533480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":64501,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4fc957d9-3d5c-43ae-827f-d511292ac4cb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533480,"event_type_id":6,"status":"blocked"}


event_id: cdbbec4a-bc41-4fd5-b38c-05c44fc64990
log_level: critical
event_category: detections
event_data:
{"connection_id":5470430,"detection_time":1742533480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":22055,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c8d86d2d-0b5f-48a0-b038-58fb37652e61
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533480,"event_type_id":6,"status":"blocked"}


event_id: a8892f84-a50e-43d1-af4a-ea608def0ab7
log_level: critical
event_category: detections
event_data:
{"connection_id":5470431,"detection_time":1742533480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19352,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 208ecd29-d11d-4e81-a4e6-bd3517abec8f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533482,"event_type_id":6,"status":"blocked"}


event_id: adc71fd9-719d-474a-8c25-d8ac292dfdc0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470417,"detection_time":1742533482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":19347,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1bc0f79b-c2ff-4e61-829c-64c4369d7acc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533482,"event_type_id":6,"status":"blocked"}


event_id: 5d08ed19-53b7-4d87-a83e-745eb76327ec
log_level: critical
event_category: detections
event_data:
{"connection_id":5470436,"detection_time":1742533482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":60276,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 85039abc-117e-481d-8928-d082825e7acc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533482,"event_type_id":6,"status":"blocked"}


event_id: eaa118ab-1716-4095-9a46-65720a2f62f2
log_level: critical
event_category: detections
event_data:
{"connection_id":5470435,"detection_time":1742533482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61809,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80699556-5336-4fb5-8458-be4e6a4f46a1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533482,"event_type_id":6,"status":"blocked"}


event_id: 5c6f9f47-1a94-4052-aac4-5a95876a6136
log_level: critical
event_category: detections
event_data:
{"connection_id":5470440,"detection_time":1742533482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59164,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 066c611e-3a16-41fb-a710-418b05bc39ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533484,"event_type_id":6,"status":"blocked"}


event_id: 8e809d85-72a7-4d6a-9af3-8cc33ea462e8
log_level: critical
event_category: detections
event_data:
{"connection_id":5470447,"detection_time":1742533484,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":5207,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9b420ad7-abf2-4623-baaa-a7214b6779be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533484,"event_type_id":6,"status":"blocked"}


event_id: e267895d-3b23-4cd2-bbae-12a3063c753e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470446,"detection_time":1742533484,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":34045,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 64e7ef82-faa6-4a35-a914-35a67caadb68
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533484,"event_type_id":6,"status":"blocked"}


event_id: 1daaef45-e38a-47dd-a52f-9328fcd982ab
log_level: critical
event_category: detections
event_data:
{"connection_id":5470448,"detection_time":1742533484,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":37673,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed801689-b632-4fec-9ce0-eca5f941f8e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533485,"event_type_id":6,"status":"blocked"}


event_id: 3f671bdc-4102-4314-978f-34ec5f4ac4de
log_level: critical
event_category: detections
event_data:
{"connection_id":5470451,"detection_time":1742533485,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":39846,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 140a6e60-a889-4570-9fa4-db02401eb50a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533486,"event_type_id":6,"status":"blocked"}


event_id: 3096a256-5e23-481c-a7f6-787890317485
log_level: critical
event_category: detections
event_data:
{"connection_id":5470456,"detection_time":1742533486,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":34460,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8e73bae4-92b0-497f-a27e-7acad3e71e14
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533486,"event_type_id":6,"status":"blocked"}


event_id: 0705a081-c916-49ff-802b-26dd107b05c5
log_level: critical
event_category: detections
event_data:
{"connection_id":5470455,"detection_time":1742533486,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51367,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ccfee4e6-0677-4422-a95d-907024c60c49
log_level: critical
event_category: detections
event_data:
{"connection_id":5470457,"detection_time":1742533486,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52769,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5f6ace83-3639-45bc-a519-5cdc26b75e9a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533486,"event_type_id":6,"status":"blocked"}


event_id: dc7893b1-b494-494d-921c-90cf15535aab
log_level: critical
event_category: detections
event_data:
{"connection_id":5470458,"detection_time":1742533486,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13898,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1fef1e98-638d-448e-a28a-1d66abefa090
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533486,"event_type_id":6,"status":"blocked"}


event_id: 9aa2d0d7-cde3-4ea7-a604-27afd4e8aeb5
log_level: critical
event_category: detections
event_data:
{"connection_id":5470459,"detection_time":1742533486,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":46544,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b09ab8da-74d0-40f3-9d68-0ddfd7d02617
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533487,"event_type_id":6,"status":"blocked"}


event_id: 43ce7a0b-fc00-44b0-97bf-6eef75efc6a6
log_level: critical
event_category: detections
event_data:
{"connection_id":5470466,"detection_time":1742533487,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":61321,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ad908e1-edcb-431d-862f-0c696b1e809a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533488,"event_type_id":6,"status":"blocked"}


event_id: 7a36c96b-8a25-4135-86af-924d6d3b2d1d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470468,"detection_time":1742533488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":49589,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 490d0a1a-9b00-4d97-bd12-18ab06f088dd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533488,"event_type_id":6,"status":"blocked"}


event_id: 843ab43b-46e7-4bfc-bbd8-76ca1e706988
log_level: critical
event_category: detections
event_data:
{"connection_id":5470464,"detection_time":1742533488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":47869,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bbec3828-daa3-42f8-ba89-be9ba0cda988
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533488,"event_type_id":6,"status":"blocked"}


event_id: 770bf787-159f-419e-b58f-2bec8bc53cbf
log_level: critical
event_category: detections
event_data:
{"connection_id":5470461,"detection_time":1742533488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39196,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9afc5241-78e2-4011-9696-da0eff411cd1
log_level: critical
event_category: detections
event_data:
{"connection_id":5470467,"detection_time":1742533488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":49283,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a311a077-5b08-4e6c-9c71-4a954af894f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533488,"event_type_id":6,"status":"blocked"}


event_id: ef96d2b0-b4af-47e1-a88e-4823a226ac5c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470474,"detection_time":1742533488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51389,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df7ea40e-0894-49e5-9e30-906ef7121e62
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533490,"event_type_id":6,"status":"blocked"}


event_id: ee3f4f3c-646d-4d1d-8ad6-2b5ada9015f4
log_level: critical
event_category: detections
event_data:
{"connection_id":5470479,"detection_time":1742533490,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":50739,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e5498b01-4744-4249-8f31-92e697252bef
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533490,"event_type_id":6,"status":"blocked"}


event_id: c579008d-e348-4030-a8e8-539dfc253e4e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470482,"detection_time":1742533490,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 578c42c4-bd96-4f3a-bdd2-3f1439217ec1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533491,"event_type_id":6,"status":"blocked"}


event_id: 23a0b26e-0a15-45f7-be66-1ad0c0712977
log_level: critical
event_category: detections
event_data:
{"connection_id":5470484,"detection_time":1742533491,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61596,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b501d20b-0e56-470a-811e-5e86021ca0a3
log_level: critical
event_category: detections
event_data:
{"connection_id":5470485,"detection_time":1742533491,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63096,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a7ef3016-104a-4868-91d3-819a015eeca9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533491,"event_type_id":6,"status":"blocked"}


event_id: 1289f372-2ba3-4ee5-98de-00f330e0911a
log_level: critical
event_category: detections
event_data:
{"connection_id":5470488,"detection_time":1742533491,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":31837,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c303cd3-b216-42cb-84b6-2d90f389fb5e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533492,"event_type_id":6,"status":"blocked"}


event_id: 7ca8d31a-336a-4ca2-835f-938d5bffef9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470492,"detection_time":1742533492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":61793,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 474ce172-cf08-4404-9793-979670605085
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533492,"event_type_id":6,"status":"blocked"}


event_id: 76ce1165-0388-4e35-bb73-060f3d7548b6
log_level: critical
event_category: detections
event_data:
{"connection_id":5470499,"detection_time":1742533492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3476,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a2a673c5-3f8a-4d85-a172-23882b33c075
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533493,"event_type_id":6,"status":"blocked"}


event_id: a57ac0d4-9dc4-4bcd-b5c2-1a61d34cb0d0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470503,"detection_time":1742533493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":1542,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0c9548b8-9ad1-463e-931c-92c5c667c04c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533493,"event_type_id":6,"status":"blocked"}


event_id: 0f66e0aa-11cf-49d4-91c9-ba4aa2b9f774
log_level: critical
event_category: detections
event_data:
{"connection_id":5470504,"detection_time":1742533493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":37855,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eedb91a5-a99a-435c-8ffe-78d38bdcb660
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533493,"event_type_id":6,"status":"blocked"}


event_id: 030687e0-f002-4662-8d58-380bca92a2b6
log_level: critical
event_category: detections
event_data:
{"connection_id":5470508,"detection_time":1742533493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6726,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 190bfc72-e100-4d42-ad3f-38c42c827260
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533493,"event_type_id":6,"status":"blocked"}


event_id: 3d22d386-f1b0-4702-aa86-dd9ab831936a
log_level: critical
event_category: detections
event_data:
{"connection_id":5470512,"detection_time":1742533493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58181,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a1ff45ba-9d17-4d27-9afb-6b9d820b2356
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533495,"event_type_id":6,"status":"blocked"}


event_id: abba2bbd-08cd-4968-b8cc-1df19d4088c4
log_level: critical
event_category: detections
event_data:
{"connection_id":5470527,"detection_time":1742533495,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58945,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 022a4118-de7a-49a5-96a7-c05e858f5e25
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533496,"event_type_id":6,"status":"blocked"}


event_id: 3c40d855-26e9-43de-8c9b-68a8718e1a87
log_level: critical
event_category: detections
event_data:
{"connection_id":5470531,"detection_time":1742533496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":45888,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3a924c2e-033d-402b-b6e2-f634828131e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470529,"detection_time":1742533496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":62775,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c20a52bd-8b05-4c67-ac41-14c4f50e83eb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533496,"event_type_id":6,"status":"blocked"}


event_id: faf2cf3c-d5f6-4f99-9ac3-76306798c711
log_level: critical
event_category: detections
event_data:
{"connection_id":5470535,"detection_time":1742533496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":18111,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98890817-70a2-4b93-ae35-2c4f8e472c35
log_level: critical
event_category: detections
event_data:
{"connection_id":5470520,"detection_time":1742533496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":57292,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 54c9d54e-73a1-4147-a26f-22a6f09969e5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533497,"event_type_id":6,"status":"blocked"}


event_id: f840e1bd-128d-47b9-9913-75eba9c03c47
log_level: critical
event_category: detections
event_data:
{"connection_id":5470536,"detection_time":1742533497,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":53726,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b544fad7-8841-41eb-9ea7-3c44e0d02d3f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533498,"event_type_id":6,"status":"blocked"}


event_id: 7a3df123-2fa3-4a5f-90ca-1679b1e84b85
log_level: critical
event_category: detections
event_data:
{"connection_id":5470538,"detection_time":1742533498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af43f671-cff9-4d9b-aa87-7353bde4453d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533498,"event_type_id":6,"status":"blocked"}


event_id: c541efce-7866-47b8-b2de-2e9133fe2020
log_level: critical
event_category: detections
event_data:
{"connection_id":5470541,"detection_time":1742533498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":56422,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d2f09ed8-04a2-4995-ab46-476e235e654c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470540,"detection_time":1742533498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49415,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a0bb36b5-af68-4af6-893e-b4f920b33770
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533500,"event_type_id":6,"status":"blocked"}


event_id: 52b3b740-b690-46ab-8926-ec585448253e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470554,"detection_time":1742533500,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":49271,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9970164d-87bc-4891-acac-a25f6abdfb2e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533502,"event_type_id":6,"status":"blocked"}


event_id: 46f71fd0-e786-474f-9eff-a003b19c39a0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470557,"detection_time":1742533502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":9581,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dd68270a-3349-4ba1-8cb4-fa6acbfbcfca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533502,"event_type_id":6,"status":"blocked"}


event_id: d2df3c14-1ef7-4c8c-aef4-f73923a26d5c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470558,"detection_time":1742533502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51677,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d0d8f815-58bc-4cad-8a18-2b8ac75449fe
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533502,"event_type_id":6,"status":"blocked"}


event_id: 3ae70dc8-71f2-469f-a4f2-4f94639e2ecb
log_level: critical
event_category: detections
event_data:
{"connection_id":5470568,"detection_time":1742533502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":41301,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a37989ff-d78f-4087-a7d2-58139b626734
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533502,"event_type_id":6,"status":"blocked"}


event_id: 3dd90eb0-4f5a-4798-9ae3-2eddc990af9b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470570,"detection_time":1742533502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":52585,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c25ccda4-a845-49cc-ac8e-afbc147a099c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470561,"detection_time":1742533502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":38168,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8d5fc66d-6a24-4bff-a791-ee25e978f619
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533502,"event_type_id":6,"status":"blocked"}


event_id: fbd70fc5-3826-4847-b777-55b88ade061a
log_level: critical
event_category: detections
event_data:
{"connection_id":5470565,"detection_time":1742533502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56312,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 977b20a7-ca39-4a56-83e5-7d2c5d4f4215
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533503,"event_type_id":6,"status":"blocked"}


event_id: 8d5cb112-b3ef-4749-9b09-57fc18a76cbc
log_level: critical
event_category: detections
event_data:
{"connection_id":5470566,"detection_time":1742533503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57454,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f22f68a9-1f6e-41d9-ba2a-25c56d1ec709
log_level: critical
event_category: detections
event_data:
{"connection_id":5470571,"detection_time":1742533503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59152,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e3a94cbc-68a8-4a67-af67-cb6113ab8418
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533503,"event_type_id":6,"status":"blocked"}


event_id: 586568ca-b752-4c2c-b9ee-21882a44b58e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470579,"detection_time":1742533503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":38376,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3d49aee6-a7cb-4294-a942-2b54a3300739
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533505,"event_type_id":6,"status":"blocked"}


event_id: 6bcb6e53-d0ce-43d9-93fd-02fad749232e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470591,"detection_time":1742533505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54350,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 37d8f494-4964-48d4-bc3f-ee4bdca7db4d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533505,"event_type_id":6,"status":"blocked"}


event_id: 26f9417c-068f-4ec6-9f61-9dec2777a407
log_level: critical
event_category: detections
event_data:
{"connection_id":5470595,"detection_time":1742533505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":19495,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8e91c6f8-1027-4066-9bcf-0168604ad545
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533506,"event_type_id":6,"status":"blocked"}


event_id: 077ed5bb-c775-4c8b-98a4-7be5920d7a02
log_level: critical
event_category: detections
event_data:
{"connection_id":5470599,"detection_time":1742533506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":20873,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c15e7d61-6b4d-40aa-9efa-7a7ed9ac3c3f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533506,"event_type_id":6,"status":"blocked"}


event_id: f08b7979-0c29-416c-8446-10495e14d869
log_level: critical
event_category: detections
event_data:
{"connection_id":5470601,"detection_time":1742533506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":54207,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fd1fafde-b630-4752-a413-542b1c571441
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"202.165.25.140","autoblock_timeout":25,"detection_time":1742533507,"event_type_id":6,"status":"blocked"}


event_id: 4cd06df1-d3fe-421a-8afd-ea0b3c64c79e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470619,"detection_time":1742533507,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"202.165.25.140","remote_port":61062,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 75a19422-9a27-4568-b93e-fc4d127f2d7e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533507,"event_type_id":6,"status":"blocked"}


event_id: 9fca6684-c976-43ac-a1ac-daead156eb2f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470610,"detection_time":1742533507,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":53085,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 05418475-f63a-4717-a6ae-8e4bdc31ec4f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533508,"event_type_id":6,"status":"blocked"}


event_id: 2175a831-d78a-4d75-a29b-3272ae7e3344
log_level: critical
event_category: detections
event_data:
{"connection_id":5470614,"detection_time":1742533508,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60011,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1735f541-a9d0-40f2-9e91-69bfe11a1278
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533508,"event_type_id":6,"status":"blocked"}


event_id: 0dc2cdfc-86c7-45e7-b7be-908ab0a97bbf
log_level: critical
event_category: detections
event_data:
{"connection_id":5470615,"detection_time":1742533508,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":54928,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3416c8d6-81a4-4c86-8e93-d90d749df305
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533508,"event_type_id":6,"status":"blocked"}


event_id: 2124e83b-4cef-4be0-b441-2d28db45b1c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5470617,"detection_time":1742533508,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":27005,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1a54807e-2959-4591-8366-40d054e6ad8c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533508,"event_type_id":6,"status":"blocked"}


event_id: 00d9862b-9553-405c-bda7-472fff8345b4
log_level: critical
event_category: detections
event_data:
{"connection_id":5470622,"detection_time":1742533508,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":60914,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b59242d9-13ab-4699-bf59-b0881662a06f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533509,"event_type_id":6,"status":"blocked"}


event_id: bb9a6a19-c698-4c88-8208-95660e1fae5d
log_level: critical
event_category: detections
event_data:
{"connection_id":5470633,"detection_time":1742533509,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62228,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a9049a15-0fcf-4989-8baa-9176bd816952
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533510,"event_type_id":6,"status":"blocked"}


event_id: 208a5797-5f63-41eb-b31c-aa37982b532e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470631,"detection_time":1742533510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":2456,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6235815f-d825-4f0a-bb86-2201d1441097
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533510,"event_type_id":6,"status":"blocked"}


event_id: 55d91f7a-6e00-4665-a098-9f7e800e353b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470630,"detection_time":1742533510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61168,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ec14f227-aee1-485d-8664-ac35bf06f388
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533510,"event_type_id":6,"status":"blocked"}


event_id: a6f54002-9086-44ac-9437-94a6e1803273
log_level: critical
event_category: detections
event_data:
{"connection_id":5470634,"detection_time":1742533510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":64081,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af40aef1-cdc8-421c-a662-f8ec9175ec59
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533511,"event_type_id":6,"status":"blocked"}


event_id: 9a9cb43e-0cc3-488a-aadd-45a45c8f6251
log_level: critical
event_category: detections
event_data:
{"connection_id":5470643,"detection_time":1742533511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":40627,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8f1d7d7a-8b26-46a6-aee8-4a5471575e90
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533512,"event_type_id":6,"status":"blocked"}


event_id: 3037b76b-0ef6-472d-aea4-f9080e16577c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470646,"detection_time":1742533512,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":36061,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bacedf80-13e3-4e1b-94e6-7aa4179a3ec2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533513,"event_type_id":6,"status":"blocked"}


event_id: 1e7a80b3-8e20-448a-b18a-6c15d20547e8
log_level: critical
event_category: detections
event_data:
{"connection_id":5470654,"detection_time":1742533513,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":56008,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3bff4fdc-d12f-45df-bf08-50eb89167ed3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533514,"event_type_id":6,"status":"blocked"}


event_id: f4f06e2c-e1b9-43b7-84fe-03bf39096caf
log_level: critical
event_category: detections
event_data:
{"connection_id":5470653,"detection_time":1742533514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":50214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66e74140-634e-46da-8afb-0940715e1b2b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533514,"event_type_id":6,"status":"blocked"}


event_id: a53217fe-cbf8-4f60-b0b6-b03c475f57fa
log_level: critical
event_category: detections
event_data:
{"connection_id":5470652,"detection_time":1742533514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":18334,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b0aaaf0-7bb7-49c8-b0cb-51e47a65601e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533514,"event_type_id":6,"status":"blocked"}


event_id: 2d436472-482d-49e1-b19b-74d8247b9724
log_level: critical
event_category: detections
event_data:
{"connection_id":5470657,"detection_time":1742533514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14329,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f33a0ecd-c6df-4409-926f-def8807a2a83
log_level: critical
event_category: detections
event_data:
{"connection_id":5470659,"detection_time":1742533514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":20400,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a0727e62-f8c5-48e5-b3de-ab3ce4e8d710
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533514,"event_type_id":6,"status":"blocked"}


event_id: 332b3b28-6f31-482a-9808-fb24bbffce00
log_level: critical
event_category: detections
event_data:
{"connection_id":5470658,"detection_time":1742533514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52338,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d3f9f61d-0c4d-4deb-8335-beac8af80717
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533514,"event_type_id":6,"status":"blocked"}


event_id: 79c3b2dc-ec4c-4215-b2e7-04d07d88311e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470660,"detection_time":1742533514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52518,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 31ff696e-aa0d-4542-a624-dd50ac73ec42
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533515,"event_type_id":6,"status":"blocked"}


event_id: 02ab5030-aa86-4f93-a985-5f382cb8c029
log_level: critical
event_category: detections
event_data:
{"connection_id":5470665,"detection_time":1742533515,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53856,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6e589304-24b5-48a3-94c1-27a3d1aae41c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470666,"detection_time":1742533515,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55854,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 217087db-d406-4074-bf02-16c79bf611a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533516,"event_type_id":6,"status":"blocked"}


event_id: 010c55a2-a3c0-4bb6-acd5-96682eaed424
log_level: critical
event_category: detections
event_data:
{"connection_id":5470682,"detection_time":1742533516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":55541,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 24f59352-1813-4015-86b6-bd7c04b07254
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533516,"event_type_id":6,"status":"blocked"}


event_id: 106eb786-b35e-49a6-80e9-63f8641705ac
log_level: critical
event_category: detections
event_data:
{"connection_id":5470673,"detection_time":1742533516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":58623,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d561a5bc-f8aa-46b6-bc23-46d3cb2ebbae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533516,"event_type_id":6,"status":"blocked"}


event_id: 2bd9bf3b-cc9d-4afd-83f5-75ccbd10624f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470674,"detection_time":1742533516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":27051,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e06254a2-9eea-4117-903a-0c0c855a1032
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533516,"event_type_id":6,"status":"blocked"}


event_id: 94d1caf3-efb4-4625-b50f-5d16c71920bf
log_level: critical
event_category: detections
event_data:
{"connection_id":5470667,"detection_time":1742533516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46381,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d143e244-b85f-412f-a5de-281632004ef6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533517,"event_type_id":6,"status":"blocked"}


event_id: 8eb03f00-c269-4a33-9b79-4f953565e043
log_level: critical
event_category: detections
event_data:
{"connection_id":5470685,"detection_time":1742533517,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51262,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6b2e8459-d95d-4a99-a224-213290d8fbba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533518,"event_type_id":6,"status":"blocked"}


event_id: 59bbd452-79fc-4de1-a9c1-8f743ffccf23
log_level: critical
event_category: detections
event_data:
{"connection_id":5470693,"detection_time":1742533518,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":28157,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8682ce22-2cec-447a-940f-6ee747cb752a
log_level: critical
event_category: detections
event_data:
{"connection_id":5470697,"detection_time":1742533518,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":29410,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8cf1cecd-3b61-4a7b-973a-9389b2933fd8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533519,"event_type_id":6,"status":"blocked"}


event_id: 603cbbf0-ef8a-48cf-870e-7e68e904e276
log_level: critical
event_category: detections
event_data:
{"connection_id":5470709,"detection_time":1742533519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":56189,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d2a4c3bb-6f88-45fa-a2fd-30c79e9cde04
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533520,"event_type_id":6,"status":"blocked"}


event_id: bffc7b74-8678-466b-b687-a1da6559e484
log_level: critical
event_category: detections
event_data:
{"connection_id":5470710,"detection_time":1742533520,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60137,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7e8519ea-30ad-44ca-92ff-989a4cc8c440
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533520,"event_type_id":6,"status":"blocked"}


event_id: f464ef99-ec5e-498f-8162-386a40efadd4
log_level: critical
event_category: detections
event_data:
{"connection_id":5470724,"detection_time":1742533520,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":51473,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b7d4349c-03da-4506-8058-c271f3c565c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533521,"event_type_id":6,"status":"blocked"}


event_id: fdf7d270-6a34-4087-9c3a-1b7276bbbad2
log_level: critical
event_category: detections
event_data:
{"connection_id":5470717,"detection_time":1742533521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":12283,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eb0123c7-9302-4a1e-9162-a5959aee4ed8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533521,"event_type_id":6,"status":"blocked"}


event_id: 91f0ba18-e832-4edc-8f5d-51e7d408bdd0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470722,"detection_time":1742533521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57260,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 949858a9-f189-4e7f-8320-f52975766800
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533522,"event_type_id":6,"status":"blocked"}


event_id: 1da8e3ba-fe11-4d98-b55c-33bbffed23f0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470725,"detection_time":1742533522,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58551,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 581f6155-8a07-45ae-89c7-49e8e6fda19b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533522,"event_type_id":6,"status":"blocked"}


event_id: fb2eccb5-2d18-4af2-878f-1b65d4a47756
log_level: critical
event_category: detections
event_data:
{"connection_id":5470727,"detection_time":1742533522,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":42143,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8542116-8f5f-4441-8094-f2417b7d7491
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533522,"event_type_id":6,"status":"blocked"}


event_id: f436640b-ed9d-478e-bfbd-90e67330ef31
log_level: critical
event_category: detections
event_data:
{"connection_id":5470729,"detection_time":1742533522,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48458,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba5651ee-856a-41f7-be04-5279f954d467
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533523,"event_type_id":6,"status":"blocked"}


event_id: 83e6f93a-8913-4289-8ad0-9fd7a0713ba9
log_level: critical
event_category: detections
event_data:
{"connection_id":5470736,"detection_time":1742533523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":51755,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ae6b27df-53a2-48a9-b98c-2b913e1d68fe
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533523,"event_type_id":6,"status":"blocked"}


event_id: f4f0287c-876e-456c-9f86-ffa401c6ce8c
log_level: critical
event_category: detections
event_data:
{"connection_id":5470737,"detection_time":1742533523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":18644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80259c36-f182-44ef-92b8-6bc2856c6b32
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533523,"event_type_id":6,"status":"blocked"}


event_id: ff8531ab-fcdb-417a-8ea0-e0bd61f8649b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470741,"detection_time":1742533523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":46890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dde2aa8a-d848-4860-8258-2275bfa06ee9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533526,"event_type_id":6,"status":"blocked"}


event_id: fab2fccb-3dac-408b-aa7f-44afb6cc3bac
log_level: critical
event_category: detections
event_data:
{"connection_id":5470763,"detection_time":1742533526,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65136,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f884c56d-b422-43a7-9a1a-64b4629bb54f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470765,"detection_time":1742533526,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50412,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 78721903-c7ca-4371-b718-f34df3f9d74a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533527,"event_type_id":6,"status":"blocked"}


event_id: e0675cad-bed0-4170-b217-a86a308262f2
log_level: critical
event_category: detections
event_data:
{"connection_id":5470767,"detection_time":1742533527,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b2d70924-8ddc-4404-aef2-992c1b1331be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533527,"event_type_id":6,"status":"blocked"}


event_id: 202c8dce-0411-4287-bad7-d186840eb0ab
log_level: critical
event_category: detections
event_data:
{"connection_id":5470768,"detection_time":1742533527,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52509,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ff94270e-0912-4eef-84e8-5c054db1a14f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533527,"event_type_id":6,"status":"blocked"}


event_id: ddb4350c-9a9e-4751-bf5e-8e39cb8d9b2f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470772,"detection_time":1742533527,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":34001,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e7cc479f-a4ef-4ae1-a734-60a57cc45063
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533527,"event_type_id":6,"status":"blocked"}


event_id: 4d089838-53c7-4699-8d6c-7c1f5695995e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470762,"detection_time":1742533527,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":7225,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4d48ed77-7666-48f6-839f-e34176932823
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533527,"event_type_id":6,"status":"blocked"}


event_id: 7ca83461-fb73-45ea-91bb-922ca05ab727
log_level: critical
event_category: detections
event_data:
{"connection_id":5470775,"detection_time":1742533527,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":62872,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd1c4f52-f30d-485d-a6e4-53a275b4fbc2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533528,"event_type_id":6,"status":"blocked"}


event_id: b9e0be1d-4896-4588-904d-bd09c8210c7e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470778,"detection_time":1742533528,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":36865,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9c2dca03-0f7d-44ae-88fc-e6cd9ee5cbbb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533529,"event_type_id":6,"status":"blocked"}


event_id: da714256-be11-4cc6-92ec-127bf9a9acd0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470789,"detection_time":1742533529,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63678,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ef400a6-459e-486c-b84d-55e200f083ee
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533530,"event_type_id":6,"status":"blocked"}


event_id: 53d90620-e763-45d3-bd99-71b6867f195f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470801,"detection_time":1742533530,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":58469,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e890101d-df03-462d-b00d-15cff403625b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533531,"event_type_id":6,"status":"blocked"}


event_id: eca24a73-9a79-4607-b313-6faa90947a37
log_level: critical
event_category: detections
event_data:
{"connection_id":5470804,"detection_time":1742533531,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":18375,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af73fbad-d9e0-4851-ae51-13094fc7baf5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533532,"event_type_id":6,"status":"blocked"}


event_id: 48e3ab69-ae80-49b5-8e43-3478f7af2237
log_level: critical
event_category: detections
event_data:
{"connection_id":5470815,"detection_time":1742533532,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":21367,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 73c3ba2e-3d6f-4429-b364-45299ddeab8b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533532,"event_type_id":6,"status":"blocked"}


event_id: 49279957-93fc-4ab0-9ab0-36315b7e712e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470817,"detection_time":1742533532,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60858,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f82076c3-e972-449f-9be3-1a1b68138fbd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"78.83.57.71","autoblock_timeout":25,"detection_time":1742533533,"event_type_id":6,"status":"blocked"}


event_id: ccbbef1f-398a-47f0-bc85-034eda8fb2e3
log_level: critical
event_category: detections
event_data:
{"connection_id":5470837,"detection_time":1742533533,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"78.83.57.71","remote_port":63368,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ee6ac5f9-9fbd-45aa-a25c-7c58a1dc1ef2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533533,"event_type_id":6,"status":"blocked"}


event_id: d143e13c-d6d6-4f6d-97d6-9a0d12d50d8b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470835,"detection_time":1742533533,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":17663,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 86aa8571-2b49-4bcf-bf3a-73fbed155737
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533533,"event_type_id":6,"status":"blocked"}


event_id: 5e62b04d-84dd-487f-b7b1-b76904b010d7
log_level: critical
event_category: detections
event_data:
{"connection_id":5470838,"detection_time":1742533533,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":18516,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 67667c67-f991-4108-aa8b-c4e2150c51dc
log_level: critical
event_category: detections
event_data:
{"connection_id":5470832,"detection_time":1742533533,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":16666,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 246294d5-e2f7-46ae-af06-eefb4d3af8df
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533533,"event_type_id":6,"status":"blocked"}


event_id: 4ec0988c-9c2d-491b-a3b5-97584d4b4b9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470840,"detection_time":1742533533,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54267,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 560750c8-7eb6-40e1-80ce-88c86bf51fb9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533534,"event_type_id":6,"status":"blocked"}


event_id: 5eb49cd8-1e0a-407a-b2c3-f35adc8bd784
log_level: critical
event_category: detections
event_data:
{"connection_id":5470843,"detection_time":1742533534,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55456,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03964ba6-982a-4716-adf2-9507557bf7bc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533534,"event_type_id":6,"status":"blocked"}


event_id: a9583713-b11c-4515-92db-d20fe2415006
log_level: critical
event_category: detections
event_data:
{"connection_id":5470850,"detection_time":1742533534,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":21397,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 27b6157f-c4c7-400a-a765-c6bee4293ba2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533535,"event_type_id":6,"status":"blocked"}


event_id: eef17bde-bf1d-48eb-abd3-156fef9b975e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470861,"detection_time":1742533535,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":64095,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e528cf89-e0dd-43f5-955a-9b69dca298cf
log_level: critical
event_category: detections
event_data:
{"connection_id":5470866,"detection_time":1742533535,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1082,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb226ac2-c342-4608-8523-0027cd2e45ad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533536,"event_type_id":6,"status":"blocked"}


event_id: 089e8346-4b85-46ff-a24d-2b6a1efb3f44
log_level: critical
event_category: detections
event_data:
{"connection_id":5470870,"detection_time":1742533536,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":34691,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 837d45e1-a0f7-42cd-865b-ea2dd8387c9e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533537,"event_type_id":6,"status":"blocked"}


event_id: ae58100a-bba2-4b07-8473-0cc191f708fe
log_level: critical
event_category: detections
event_data:
{"connection_id":5470891,"detection_time":1742533537,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":33955,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e0bc4486-dc89-4f37-845a-982862517a18
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533537,"event_type_id":6,"status":"blocked"}


event_id: 16cfa668-8ec3-4788-a60a-22da04a04562
log_level: critical
event_category: detections
event_data:
{"connection_id":5470894,"detection_time":1742533537,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":7369,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 62b4f083-0812-4fee-b005-84725f9c5e09
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533537,"event_type_id":6,"status":"blocked"}


event_id: 6adfb9b8-fbfd-46c9-86fa-ea37efd3e15f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470897,"detection_time":1742533537,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":41473,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 613bf72c-4372-4e55-84a4-cd8607ca9c13
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533538,"event_type_id":6,"status":"blocked"}


event_id: aab7041b-765b-4fe5-9c47-0c56287bb948
log_level: critical
event_category: detections
event_data:
{"connection_id":5470896,"detection_time":1742533538,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":35390,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de83c099-589d-4bc6-a249-6211a7bf8c6a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533538,"event_type_id":6,"status":"blocked"}


event_id: 47c87d9d-8a3d-474e-b190-5a32d3daf807
log_level: critical
event_category: detections
event_data:
{"connection_id":5470901,"detection_time":1742533538,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61984,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9545c55e-c4ea-4184-be64-03473bcf062e
log_level: critical
event_category: detections
event_data:
{"connection_id":5470909,"detection_time":1742533538,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63248,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2d278feb-2080-4a4e-a13f-549974debb0c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533538,"event_type_id":6,"status":"blocked"}


event_id: 92f01cd7-16fc-4878-8aee-b75bf479a7a3
log_level: critical
event_category: detections
event_data:
{"connection_id":5470916,"detection_time":1742533538,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":53238,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 06719e27-8c18-4bea-8b35-a8fb2e311b2e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533539,"event_type_id":6,"status":"blocked"}


event_id: fed659a9-f7fe-4cd5-97e8-fc5ea784042f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470913,"detection_time":1742533539,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64706,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6bc9c091-7619-41d3-8533-876966e24e6b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533539,"event_type_id":6,"status":"blocked"}


event_id: 00fdb841-889b-489d-ba43-9f3fd41b02fe
log_level: critical
event_category: detections
event_data:
{"connection_id":5470915,"detection_time":1742533539,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":47053,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66e72edc-5ea2-4732-b9ea-d8e06166a6f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533540,"event_type_id":6,"status":"blocked"}


event_id: 1f425990-15a3-490e-a2db-66020c03e943
log_level: critical
event_category: detections
event_data:
{"connection_id":5470922,"detection_time":1742533540,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":44208,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a9e4b88d-a6ab-4e41-866f-4d5e9884a8f7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533541,"event_type_id":6,"status":"blocked"}


event_id: f25e16bc-d833-4a43-a1dd-bc2eab85dc96
log_level: critical
event_category: detections
event_data:
{"connection_id":5470926,"detection_time":1742533541,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60024,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ee7e5b8-909d-4965-8cb4-9a4d7e9d90cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533541,"event_type_id":6,"status":"blocked"}


event_id: 03219f15-07ce-4cbd-95fd-d305097645d5
log_level: critical
event_category: detections
event_data:
{"connection_id":5470938,"detection_time":1742533541,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":53243,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4f1a5184-ea78-419f-9948-f69822bd94f3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533541,"event_type_id":6,"status":"blocked"}


event_id: 398fa377-4153-4b86-b857-e5bb7a7ac4a0
log_level: critical
event_category: detections
event_data:
{"connection_id":5470931,"detection_time":1742533541,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21079,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d1ef9c11-d3fb-431b-8226-7b182ff25074
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533543,"event_type_id":6,"status":"blocked"}


event_id: 0ab54728-0f03-47cb-9dbc-77f307da4b59
log_level: critical
event_category: detections
event_data:
{"connection_id":5470944,"detection_time":1742533543,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":28961,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c2a5483d-53d3-4567-b6dd-ffdb66a40383
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533543,"event_type_id":6,"status":"blocked"}


event_id: 80d294ec-c787-474b-9af5-8cdd5ca11bfb
log_level: critical
event_category: detections
event_data:
{"connection_id":5470947,"detection_time":1742533543,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":63212,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cbb7d2cc-4550-4fb5-af61-fb8d7f036f06
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533543,"event_type_id":6,"status":"blocked"}


event_id: 2b2bb71e-a51f-4e9c-9c19-0bfdc8416158
log_level: critical
event_category: detections
event_data:
{"connection_id":5470948,"detection_time":1742533543,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":30554,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e74a06ea-e932-4bfd-960a-9fa6aa45ca64
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533544,"event_type_id":6,"status":"blocked"}


event_id: 4d2991ea-9fcd-4c77-9194-1890badebe41
log_level: critical
event_category: detections
event_data:
{"connection_id":5470949,"detection_time":1742533544,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":31417,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cebfe106-2846-4c5a-ad7e-ee70600c37f3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533544,"event_type_id":6,"status":"blocked"}


event_id: 30b78add-cdbc-4382-bfcb-60aaea6e4fbf
log_level: critical
event_category: detections
event_data:
{"connection_id":5470951,"detection_time":1742533544,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":65406,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 27558f33-9536-40a3-97b5-4858b17a3fa9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533544,"event_type_id":6,"status":"blocked"}


event_id: c3b600c0-57f9-47fa-b0e4-3947f7431970
log_level: critical
event_category: detections
event_data:
{"connection_id":5470958,"detection_time":1742533544,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":61442,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58845571-d2b8-478b-b295-fc313b75a561
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533544,"event_type_id":6,"status":"blocked"}


event_id: 51913043-8e5f-4d04-8f78-03476e4aee01
log_level: critical
event_category: detections
event_data:
{"connection_id":5470953,"detection_time":1742533544,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":59369,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3754be7-3e0a-4b7d-8851-edcde4543cb9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533544,"event_type_id":6,"status":"blocked"}


event_id: 52368ae6-ef05-416c-a5d5-1dc8138422bf
log_level: critical
event_category: detections
event_data:
{"connection_id":5470962,"detection_time":1742533544,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51865,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fcb0d1a4-df24-459d-b99a-9d759786380c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533545,"event_type_id":6,"status":"blocked"}


event_id: db5791d1-6e53-4661-a179-e937c3c94127
log_level: critical
event_category: detections
event_data:
{"connection_id":5470959,"detection_time":1742533545,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50661,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ee2f9c54-7c72-464f-ac10-650819eb272a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533545,"event_type_id":6,"status":"blocked"}


event_id: 363ae895-75f4-4df0-909f-31d9b6c4a9ef
log_level: critical
event_category: detections
event_data:
{"connection_id":5470960,"detection_time":1742533545,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61237,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 513f7c68-0ddb-42da-ac99-589ef39b36cb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533545,"event_type_id":6,"status":"blocked"}


event_id: bfb40255-0e63-4c84-8c73-332fdaa92602
log_level: critical
event_category: detections
event_data:
{"connection_id":5470964,"detection_time":1742533545,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":7338,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 884f891b-219b-46e5-9b18-34cc84abf4dd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533546,"event_type_id":6,"status":"blocked"}


event_id: 22e766d9-5472-48aa-afc2-c586ea9d5ac3
log_level: critical
event_category: detections
event_data:
{"connection_id":5470965,"detection_time":1742533546,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":38870,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8fb2ba40-666e-47af-a42e-7599e2ad4bc7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533548,"event_type_id":6,"status":"blocked"}


event_id: b89a9a17-f8c9-4559-9815-ebd7a497c204
log_level: critical
event_category: detections
event_data:
{"connection_id":5470974,"detection_time":1742533548,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8119,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c9e58c8b-7788-4a8a-8fb1-30c856529b7b
log_level: critical
event_category: detections
event_data:
{"connection_id":5470975,"detection_time":1742533548,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":9699,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: da4e0229-914a-4913-a76a-0671c491d9d8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533550,"event_type_id":6,"status":"blocked"}


event_id: a9808ce4-47c4-406c-b008-ffd1ba0f1ca9
log_level: critical
event_category: detections
event_data:
{"connection_id":5470982,"detection_time":1742533550,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58242,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 08066802-f1b8-4920-ae74-1e85904fa883
log_level: critical
event_category: detections
event_data:
{"connection_id":5470983,"detection_time":1742533550,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60121,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a661ace9-0e7b-43f1-acb2-304949ff2078
log_level: critical
event_category: detections
event_data:
{"connection_id":5470986,"detection_time":1742533550,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61747,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 36c60156-d93f-4efa-8ec8-5eebe4577e31
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533551,"event_type_id":6,"status":"blocked"}


event_id: 3fbcd0b6-7ae6-4f3b-8982-4de536e83045
log_level: critical
event_category: detections
event_data:
{"connection_id":5470990,"detection_time":1742533551,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":56616,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3a229658-1f64-4cde-983c-be4a23119be2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533551,"event_type_id":6,"status":"blocked"}


event_id: 47393443-5466-4ad1-b13e-ab90ed21dd1f
log_level: critical
event_category: detections
event_data:
{"connection_id":5470961,"detection_time":1742533551,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":37240,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7af565c5-124f-4101-bc98-6bb64b099974
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533551,"event_type_id":6,"status":"blocked"}


event_id: 672580ae-4a7f-46c5-900b-bb8620444542
log_level: critical
event_category: detections
event_data:
{"connection_id":5470992,"detection_time":1742533551,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":28776,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8fb65015-85a0-4dc1-bcc9-22c972b75e15
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533552,"event_type_id":6,"status":"blocked"}


event_id: 7cd5f6ef-02d8-4654-83a7-2c9c50c67317
log_level: critical
event_category: detections
event_data:
{"connection_id":5470999,"detection_time":1742533552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":22191,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69d3825b-781c-40e9-aee9-d27eb55aeb1c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533552,"event_type_id":6,"status":"blocked"}


event_id: 4b1489de-f725-491a-8fb9-85b97d63befc
log_level: critical
event_category: detections
event_data:
{"connection_id":5471000,"detection_time":1742533552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":53822,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f4ff590e-5b02-49c9-b967-8736df621e6e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533552,"event_type_id":6,"status":"blocked"}


event_id: 186de19a-d94f-4047-9db6-dec686e032f4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471003,"detection_time":1742533552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":31971,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4701646b-6c76-475a-96b4-96256a83d367
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533552,"event_type_id":6,"status":"blocked"}


event_id: 9df0a617-23da-494f-a7d2-ec4f97941462
log_level: critical
event_category: detections
event_data:
{"connection_id":5471005,"detection_time":1742533552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":63171,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 322a5a4a-e872-428b-a5c6-edd94c5be5a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533553,"event_type_id":6,"status":"blocked"}


event_id: 4de921d4-2cdc-4431-b6ab-9e947922d56d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471007,"detection_time":1742533553,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56920,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82d411c4-76ca-4f73-807b-f047e07e688a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533553,"event_type_id":6,"status":"blocked"}


event_id: fff701c7-22e5-461c-a0e0-950e9106fa7a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471009,"detection_time":1742533553,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":26757,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87116f23-cfe9-43bd-b710-9a68724fbc34
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533555,"event_type_id":6,"status":"blocked"}


event_id: 1d7e836a-ad14-4165-89db-057ae7cb112b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471016,"detection_time":1742533555,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":63281,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 93c23d1f-fba4-4239-9b9b-09665a178e6c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533556,"event_type_id":6,"status":"blocked"}


event_id: 7b3a32ad-ba9b-4d21-b008-b25c9f4322e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5471024,"detection_time":1742533556,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":14316,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 279ac324-9650-493b-9c1c-cf63e681a8e4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533557,"event_type_id":6,"status":"blocked"}


event_id: 6b24fac7-a835-4a80-841b-5ed84ea1a0d7
log_level: critical
event_category: detections
event_data:
{"connection_id":5471027,"detection_time":1742533557,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63025,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c2fe9dda-00e1-4725-9c33-0831d932ada0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533557,"event_type_id":6,"status":"blocked"}


event_id: dd60a4d3-cc62-4941-9d3f-e6f0bc029b8d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471030,"detection_time":1742533557,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":43043,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c689af81-7896-4c0d-a2c1-dadf2b51d306
log_level: critical
event_category: detections
event_data:
{"connection_id":5471029,"detection_time":1742533557,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64446,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ba17526-2422-439a-a05f-3864994ddbb3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533557,"event_type_id":6,"status":"blocked"}


event_id: 69628ef3-1824-4d68-af87-758e976feb09
log_level: critical
event_category: detections
event_data:
{"connection_id":5471031,"detection_time":1742533557,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":17199,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c07d45cc-1236-4d5d-a7fa-3043578d62d6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533558,"event_type_id":6,"status":"blocked"}


event_id: 85dd0917-df0e-4a88-81fb-2f397fec9340
log_level: critical
event_category: detections
event_data:
{"connection_id":5471039,"detection_time":1742533558,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":64364,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3930d069-1a19-4b5a-a682-ba63f4d23f61
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533558,"event_type_id":6,"status":"blocked"}


event_id: b16df0b7-7610-4d75-9628-25f935ed8a52
log_level: critical
event_category: detections
event_data:
{"connection_id":5471033,"detection_time":1742533558,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62205,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fa365526-cfe5-4c8b-b45d-af3a000404c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533561,"event_type_id":6,"status":"blocked"}


event_id: 347f3187-edca-4899-b23c-2185965b5056
log_level: critical
event_category: detections
event_data:
{"connection_id":5471048,"detection_time":1742533561,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62889,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f247f4f5-f6f9-40ec-a00d-2fccb408fbe8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533561,"event_type_id":6,"status":"blocked"}


event_id: 93c725c5-47e3-4183-8d0e-4d50bbc9639b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471064,"detection_time":1742533561,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":54894,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: da7f3d30-58d0-4338-bf6a-a944ac721488
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533561,"event_type_id":6,"status":"blocked"}


event_id: bbaab08a-a22f-4185-bc3c-b93969ecca8f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471054,"detection_time":1742533561,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54569,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 41412cab-e262-42f9-8068-d89199a7c26a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471056,"detection_time":1742533561,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":1236,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 08f92562-f82c-46cc-b69f-4e6f3b1f17af
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533562,"event_type_id":6,"status":"blocked"}


event_id: 0728170b-8c24-497d-ab4b-c48256cce2e8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471041,"detection_time":1742533562,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":20355,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87e0d30f-271e-4240-9735-b88ec58ccc00
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533562,"event_type_id":6,"status":"blocked"}


event_id: 17e483f1-8d05-4089-8010-62d44823d9c9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471060,"detection_time":1742533562,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56557,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9dc66a43-db12-4b6f-8503-3b091e12f450
log_level: critical
event_category: detections
event_data:
{"connection_id":5471065,"detection_time":1742533562,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57884,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 94fa5304-99c7-4519-9252-67b069617530
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533563,"event_type_id":6,"status":"blocked"}


event_id: fd62134e-fd87-432b-bb0c-54adae0cfb9b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471071,"detection_time":1742533563,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":63093,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 55e05e82-5887-4831-8374-e05da5db784d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533563,"event_type_id":6,"status":"blocked"}


event_id: aa137c14-65c0-49ec-a7d7-8366419f4b7b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471082,"detection_time":1742533563,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":54201,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7729cd01-a31a-428e-b402-9247708f3daa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533564,"event_type_id":6,"status":"blocked"}


event_id: 8aad39be-b871-4e16-86f4-fd9d9159c38d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471087,"detection_time":1742533564,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53125,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d62c0f21-ed24-40c0-a15b-f6c11d88b6e3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533565,"event_type_id":6,"status":"blocked"}


event_id: be04b3fa-fb1c-43b3-bd7e-8d5f0de8684c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471090,"detection_time":1742533565,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":44347,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b2caddf4-92af-4c0d-b83e-a88d53a1ca11
log_level: critical
event_category: detections
event_data:
{"connection_id":5471093,"detection_time":1742533565,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":46006,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aa28a5e1-17be-460e-aafb-351752878802
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533565,"event_type_id":6,"status":"blocked"}


event_id: f5ee149c-a773-462a-b8c9-dd4e4d1722ad
log_level: critical
event_category: detections
event_data:
{"connection_id":5471094,"detection_time":1742533565,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":14583,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f5d71e1b-21a8-4fb1-b2a8-71faf5efe0a8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533566,"event_type_id":6,"status":"blocked"}


event_id: 729c24cf-b73c-41eb-a31f-5739018bb4b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471103,"detection_time":1742533566,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":31214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 979b3bbf-db7f-4299-a29d-61806f444feb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533567,"event_type_id":6,"status":"blocked"}


event_id: fa271f3c-a136-44f9-bf77-fc701c8822fe
log_level: critical
event_category: detections
event_data:
{"connection_id":5471104,"detection_time":1742533567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52330,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 242dfee7-efc6-4b2c-815b-1fe451a3ad93
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533567,"event_type_id":6,"status":"blocked"}


event_id: a0daf0d0-5662-488f-8676-03db245b2014
log_level: critical
event_category: detections
event_data:
{"connection_id":5471105,"detection_time":1742533567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14514,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 009d9982-81e3-4e87-8631-5704a6dca486
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533567,"event_type_id":6,"status":"blocked"}


event_id: 86dc9558-dc09-4ba5-89ab-bbfd8f2e3a1d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471106,"detection_time":1742533567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":21913,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e29f8c93-e7be-4ea4-ad1f-1d8eb34f7b15
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533568,"event_type_id":6,"status":"blocked"}


event_id: 3aaeeb9a-763c-462b-9a76-5d197a23769d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471108,"detection_time":1742533568,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":16585,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b7c4baa7-e9aa-4f08-a4ac-be6a55dca8d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533568,"event_type_id":6,"status":"blocked"}


event_id: dda09693-c80a-4300-9b9e-e23974a815b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5471114,"detection_time":1742533568,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26950,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b765bc7a-d922-461a-92ca-1a40ddb9110d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533569,"event_type_id":6,"status":"blocked"}


event_id: 64dad66a-9848-49da-9184-c8e771e83537
log_level: critical
event_category: detections
event_data:
{"connection_id":5471115,"detection_time":1742533569,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59696,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1d643fce-f7a2-4893-b284-8594365cc4ae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533569,"event_type_id":6,"status":"blocked"}


event_id: 74886663-71c9-4bdb-9097-33fb5d00d641
log_level: critical
event_category: detections
event_data:
{"connection_id":5471119,"detection_time":1742533569,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61835,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bdc2f64c-840e-44f4-9127-c19449c8df28
log_level: critical
event_category: detections
event_data:
{"connection_id":5471116,"detection_time":1742533569,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61110,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eaf798d1-436f-48ea-80bf-7dd80d70ba98
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533569,"event_type_id":6,"status":"blocked"}


event_id: 24753b2a-a21c-431b-9493-42671b80b62e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471117,"detection_time":1742533569,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":40293,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e83c6cb7-7407-491b-93bc-e4237d872aa7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533570,"event_type_id":6,"status":"blocked"}


event_id: cab3148e-336e-45ed-954d-aa1a64c35911
log_level: critical
event_category: detections
event_data:
{"connection_id":5471120,"detection_time":1742533570,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":24831,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ae98225-344f-421c-9bc5-01c5911a84e4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533571,"event_type_id":6,"status":"blocked"}


event_id: 6acd890f-4950-4f3b-b423-451afc687316
log_level: critical
event_category: detections
event_data:
{"connection_id":5471122,"detection_time":1742533571,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1439,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a33e33ac-9550-4fff-8c52-5a164dda9e8c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533572,"event_type_id":6,"status":"blocked"}


event_id: 013ac240-3035-42f6-8d22-16ffe786da3e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471150,"detection_time":1742533572,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":51073,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9da4243a-a0e5-4c7b-8370-18ff0815039f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533573,"event_type_id":6,"status":"blocked"}


event_id: 1d468e9a-d2c3-4f05-9bae-9d17509bd247
log_level: critical
event_category: detections
event_data:
{"connection_id":5471149,"detection_time":1742533573,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":43479,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df686910-bb7e-4e21-9a96-59f7c98ece88
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533573,"event_type_id":6,"status":"blocked"}


event_id: 60e5a8bd-3deb-44ec-9f4c-60756740639d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471151,"detection_time":1742533573,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":11085,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 274db11d-67ca-41a5-926f-52edfedba1ac
log_level: critical
event_category: detections
event_data:
{"connection_id":5471154,"detection_time":1742533573,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":46284,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 48e2b2de-7fcc-4601-b738-cd09bbaac970
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533574,"event_type_id":6,"status":"blocked"}


event_id: 14128de5-34f4-48c2-a584-df5bfa9aa1fa
log_level: critical
event_category: detections
event_data:
{"connection_id":5471152,"detection_time":1742533574,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51274,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0febe7b3-8545-47d9-aabb-ea11d0fb513d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471155,"detection_time":1742533574,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52563,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0f049923-d683-4ffd-9500-2c863a407b8d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533574,"event_type_id":6,"status":"blocked"}


event_id: 991744be-bf17-4054-a956-3d457bea19ae
log_level: critical
event_category: detections
event_data:
{"connection_id":5471156,"detection_time":1742533574,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39651,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a56e0ea-0fd4-451a-8fc9-779dfc3a54b6
log_level: critical
event_category: detections
event_data:
{"connection_id":5471159,"detection_time":1742533574,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54142,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d840b34-dd7c-453c-a569-4df2d1625fa9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533575,"event_type_id":6,"status":"blocked"}


event_id: b936dd44-5637-4a0e-8b4c-b88880ff725a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471162,"detection_time":1742533575,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":52241,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8dc6e316-7362-4e4e-aa87-7040786fa12b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533575,"event_type_id":6,"status":"blocked"}


event_id: 4cf690c3-75cf-43f6-8e59-24b41619612c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471164,"detection_time":1742533575,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":19435,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fca2119f-a8c2-4c2c-9934-b0ff5f6a9ea7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533576,"event_type_id":6,"status":"blocked"}


event_id: 01bf6dbf-c177-40bd-aa49-aee1f0e1813c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471169,"detection_time":1742533576,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49243,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8da8980-1648-4ab4-ac13-d5784d158c81
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533578,"event_type_id":6,"status":"blocked"}


event_id: 3d4f0bf2-3ef2-4a94-8836-18e842156d84
log_level: critical
event_category: detections
event_data:
{"connection_id":5471180,"detection_time":1742533578,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52899,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 16e2d699-6b14-4008-86cb-cacd15948e3a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533578,"event_type_id":6,"status":"blocked"}


event_id: 8b2b5d3d-5ab1-4078-8bd3-b81cec66ae81
log_level: critical
event_category: detections
event_data:
{"connection_id":5471186,"detection_time":1742533578,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":56659,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 518a5532-e11f-4387-99c2-297af75f010a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471182,"detection_time":1742533578,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":54434,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ac4abbc0-36c9-4b99-bf13-8740ee0a0d7e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533578,"event_type_id":6,"status":"blocked"}


event_id: 2221cc5f-9ad0-4d1b-82be-9af8cf9c0acb
log_level: critical
event_category: detections
event_data:
{"connection_id":5471181,"detection_time":1742533578,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":65472,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7c693014-cb70-4bad-8639-845eb07cfe9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533579,"event_type_id":6,"status":"blocked"}


event_id: 1a957167-319e-4036-acb3-f8fe4894620e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471173,"detection_time":1742533579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":62276,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 620abd6c-35ff-45b3-8cf1-f3129eee5598
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533580,"event_type_id":6,"status":"blocked"}


event_id: b6637a9a-b197-4d72-8b21-97eea091e836
log_level: critical
event_category: detections
event_data:
{"connection_id":5471200,"detection_time":1742533580,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57547,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 06c8b969-fc9e-4e3d-9e82-85a18aaa4194
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533580,"event_type_id":6,"status":"blocked"}


event_id: f93951e4-9c1c-43d3-80a6-e8b617e3ce88
log_level: critical
event_category: detections
event_data:
{"connection_id":5471196,"detection_time":1742533580,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":36785,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1c346f95-96ff-4f06-b08e-5d592abc613d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471197,"detection_time":1742533580,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55934,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d543bf2b-ef1f-49a8-8e12-e80e79f69f2c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533581,"event_type_id":6,"status":"blocked"}


event_id: 4a3e23e4-5079-42ff-96d3-fd1b88e04d75
log_level: critical
event_category: detections
event_data:
{"connection_id":5471201,"detection_time":1742533581,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":8894,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fb80979d-7076-4ae7-aa0c-70578d2e4b65
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533581,"event_type_id":6,"status":"blocked"}


event_id: 257ca7a8-0512-43eb-9447-dedda18e5749
log_level: critical
event_category: detections
event_data:
{"connection_id":5471205,"detection_time":1742533581,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":63866,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5bf257ec-b663-4cba-8c99-280003de6d62
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533581,"event_type_id":6,"status":"blocked"}


event_id: c8f5b544-6658-4cb7-aae9-4feaafc0b930
log_level: critical
event_category: detections
event_data:
{"connection_id":5471215,"detection_time":1742533581,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":56053,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 38860127-697a-4a37-8af3-32e346de7caf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533581,"event_type_id":6,"status":"blocked"}


event_id: 81035f5b-377a-4d8a-9eed-f2cb24d78abe
log_level: critical
event_category: detections
event_data:
{"connection_id":5471207,"detection_time":1742533581,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":2965,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 62803533-0095-471b-97d6-e040a29936c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533582,"event_type_id":6,"status":"blocked"}


event_id: fe4f7459-f084-458b-8b59-d8e4d6c93f0c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471209,"detection_time":1742533582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":12310,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0a5c048b-9ff0-47c5-9bfb-99a0f4a56125
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533582,"event_type_id":6,"status":"blocked"}


event_id: 74e99f24-feb5-4d80-9f3a-838eb62c92a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5471210,"detection_time":1742533582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60963,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 40ffaa32-ee32-4e0b-94ab-3044b80ad86a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533582,"event_type_id":6,"status":"blocked"}


event_id: 35901287-13d5-41de-b857-d9649a455f35
log_level: critical
event_category: detections
event_data:
{"connection_id":5471212,"detection_time":1742533582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":43679,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7f73abbd-2130-4b7f-8c6b-73e0e18c07fb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533582,"event_type_id":6,"status":"blocked"}


event_id: 3d68b034-2e4b-4f3d-ac45-8adce057d15c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471214,"detection_time":1742533582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":61373,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 240dfaab-685d-4882-a43a-6726705bc140
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533583,"event_type_id":6,"status":"blocked"}


event_id: 03960253-5238-467e-be4c-782a69393edd
log_level: critical
event_category: detections
event_data:
{"connection_id":5471217,"detection_time":1742533583,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":7235,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 95618fa9-3d40-4b1a-8190-2c075e2ba692
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533584,"event_type_id":6,"status":"blocked"}


event_id: a1831f77-4338-4127-a73e-b11f92cc36ec
log_level: critical
event_category: detections
event_data:
{"connection_id":5471220,"detection_time":1742533584,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":7972,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 26b08ab4-843d-452f-b6bd-0e60f4e34c7f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533585,"event_type_id":6,"status":"blocked"}


event_id: 1a30bb07-fd70-43f9-ad25-82d396c3f3bf
log_level: critical
event_category: detections
event_data:
{"connection_id":5471222,"detection_time":1742533585,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":12235,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6bbae27c-a450-45f1-8766-941122a35568
log_level: critical
event_category: detections
event_data:
{"connection_id":5471221,"detection_time":1742533585,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":8825,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c9894cf6-9280-4891-ac17-ea1cbf018cee
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533585,"event_type_id":6,"status":"blocked"}


event_id: 14703412-c504-464c-a6fc-d6559dcb93cf
log_level: critical
event_category: detections
event_data:
{"connection_id":5471223,"detection_time":1742533585,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63786,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 32214652-2425-49d6-ac24-d583a7b2e82a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471224,"detection_time":1742533585,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49283,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7b77f1f3-f2cb-42bc-abe9-8491c9156b4e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533586,"event_type_id":6,"status":"blocked"}


event_id: 0a234beb-83c3-4990-b4f0-5e89bdc3c9c9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471232,"detection_time":1742533586,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":53999,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c919d75a-d177-41ee-a13c-d0d149b0588a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533586,"event_type_id":6,"status":"blocked"}


event_id: 94688939-9b9d-4d1e-b727-2edc4452d7aa
log_level: critical
event_category: detections
event_data:
{"connection_id":5471225,"detection_time":1742533586,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50688,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 548c3ab0-4ed5-4017-bdae-b2e75dc80b6e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533586,"event_type_id":6,"status":"blocked"}


event_id: 1072b701-0f9a-4ac2-aca5-8c6175bbaf56
log_level: critical
event_category: detections
event_data:
{"connection_id":5471228,"detection_time":1742533586,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":59202,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4597ce92-b48a-47b2-bdd4-58b1e8d7be07
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533587,"event_type_id":6,"status":"blocked"}


event_id: 3f3e526b-e22b-488a-afe5-4413deec916d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471230,"detection_time":1742533587,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":17001,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 696c259d-b1fc-4fb2-b738-c65d0f7b647d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533587,"event_type_id":6,"status":"blocked"}


event_id: 98a4d181-4607-4556-a8a3-4346291cfd14
log_level: critical
event_category: detections
event_data:
{"connection_id":5471231,"detection_time":1742533587,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":23271,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 16789931-371e-433d-a636-708137a976bc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533587,"event_type_id":6,"status":"blocked"}


event_id: a40f01d1-aa28-463d-9b56-1d9fc6d2d155
log_level: critical
event_category: detections
event_data:
{"connection_id":5471233,"detection_time":1742533587,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":62287,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 658a546f-c7d2-407a-bc84-f133a2a9841c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533588,"event_type_id":6,"status":"blocked"}


event_id: 09acb7bf-7090-4cb5-a6a1-83fec0446af8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471236,"detection_time":1742533588,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62217,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0a8d43f6-07b6-4817-bc6a-77665824fa6e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533590,"event_type_id":6,"status":"blocked"}


event_id: cbc29e79-a20b-4312-8a2c-76e69911884e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471251,"detection_time":1742533590,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":57195,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 270dcf5b-9733-4378-abf1-cf9b5e7414a1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533590,"event_type_id":6,"status":"blocked"}


event_id: 137c6fbd-8c22-45ce-9966-8fe25cdb29ef
log_level: critical
event_category: detections
event_data:
{"connection_id":5471247,"detection_time":1742533590,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":43513,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c4c856be-d5a2-4dab-8f1e-73c8d0b30586
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533591,"event_type_id":6,"status":"blocked"}


event_id: f176c5b6-1baa-42be-b18b-8cdfac07125b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471252,"detection_time":1742533591,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":46319,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8d31c495-9eb1-4bef-9176-b5f5ff4f00f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533592,"event_type_id":6,"status":"blocked"}


event_id: 0040b55b-e312-4e44-942a-38039d9f48e4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471258,"detection_time":1742533592,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51900,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ab1ef91-cf0b-41f1-8e7c-eebf745b6f1f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533593,"event_type_id":6,"status":"blocked"}


event_id: 5da16c8f-ef9f-43d2-82ef-c18dcd0e0b51
log_level: critical
event_category: detections
event_data:
{"connection_id":5471261,"detection_time":1742533593,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53846,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 06d97a9b-bc84-4bf8-89c6-4c29670525ae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533593,"event_type_id":6,"status":"blocked"}


event_id: 241d8069-3503-4310-a2a2-915a5df0d4d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5471262,"detection_time":1742533593,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":43281,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 95873ee3-92f4-4da7-90ff-8435cebafda0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533594,"event_type_id":6,"status":"blocked"}


event_id: 5b8601a3-3cd2-48f4-a362-328fe68f5b21
log_level: critical
event_category: detections
event_data:
{"connection_id":5471269,"detection_time":1742533594,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":24425,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f89e85f1-3481-45cb-a7da-5c1dc705bd47
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533595,"event_type_id":6,"status":"blocked"}


event_id: 15a057ce-f0cb-401e-ba87-8eab84596fcd
log_level: critical
event_category: detections
event_data:
{"connection_id":5471275,"detection_time":1742533595,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":59753,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5e8e456c-0fb9-48cf-ac60-af1e1b2c7af3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533595,"event_type_id":6,"status":"blocked"}


event_id: 9924e2c7-2408-4772-ae5b-9cc389833e4b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471273,"detection_time":1742533595,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61751,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba33ece6-adf1-4473-b2c7-3c1d6e3ec356
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533595,"event_type_id":6,"status":"blocked"}


event_id: ed0010a1-44de-4247-9ebe-700714d983b0
log_level: critical
event_category: detections
event_data:
{"connection_id":5471276,"detection_time":1742533595,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":26590,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2a45923c-0d7f-45fb-944f-615c9f2e7a4c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533596,"event_type_id":6,"status":"blocked"}


event_id: 19f7653f-7326-455a-863d-d8b1952091b3
log_level: critical
event_category: detections
event_data:
{"connection_id":5471288,"detection_time":1742533596,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":44436,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a3338a9-1a8d-4db6-b28b-84472b765dd1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533597,"event_type_id":6,"status":"blocked"}


event_id: 1af4b5fc-3723-477e-a0e2-1d749cc07837
log_level: critical
event_category: detections
event_data:
{"connection_id":5471281,"detection_time":1742533597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":32747,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 96e65b21-d7b0-4e22-866b-7ddcaf3b06d9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533597,"event_type_id":6,"status":"blocked"}


event_id: 88b20842-2028-4804-b8ea-2ddf16d5c384
log_level: critical
event_category: detections
event_data:
{"connection_id":5471283,"detection_time":1742533597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":2443,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8d0e6b6-d822-4c19-b069-3e22c20d26b4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533597,"event_type_id":6,"status":"blocked"}


event_id: 224182ed-2e87-4dc8-851f-49193eadb112
log_level: critical
event_category: detections
event_data:
{"connection_id":5471286,"detection_time":1742533597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":59253,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cda7ae58-8a22-41fd-b7d1-0f1c80fde410
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533597,"event_type_id":6,"status":"blocked"}


event_id: 25c58b62-be00-4b5a-9e00-77a79e18f26d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471294,"detection_time":1742533597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":63543,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 00b6ff3e-2581-419e-8447-904a1dd8f546
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533597,"event_type_id":6,"status":"blocked"}


event_id: 88797bae-28b4-4ec6-b909-49fc86da48b4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471285,"detection_time":1742533597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60421,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 15c61cdf-aa8d-4ee9-8713-0a75332e4e06
log_level: critical
event_category: detections
event_data:
{"connection_id":5471289,"detection_time":1742533597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62032,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 189e0f74-60e3-4382-a501-58ee63fc9760
log_level: critical
event_category: detections
event_data:
{"connection_id":5471292,"detection_time":1742533597,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":61441,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0542d94c-b3d8-412a-b4d7-849de633686f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533598,"event_type_id":6,"status":"blocked"}


event_id: 38210baa-af94-41e6-bb2b-8f2b32872bd8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471291,"detection_time":1742533598,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63930,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 182926de-4714-4cbe-86ea-a38dfbabf604
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533598,"event_type_id":6,"status":"blocked"}


event_id: bec81ba6-80c3-46a0-a166-dc3922287a09
log_level: critical
event_category: detections
event_data:
{"connection_id":5471293,"detection_time":1742533598,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":7345,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5b90dae0-9644-4c8f-a41e-093e58691b97
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533600,"event_type_id":6,"status":"blocked"}


event_id: 20037b18-5ebb-448c-a2cf-453e098fdeb7
log_level: critical
event_category: detections
event_data:
{"connection_id":5471301,"detection_time":1742533600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":5252,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d11a5a0e-b142-4a1a-b216-e8b59f817b87
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533600,"event_type_id":6,"status":"blocked"}


event_id: 5ac627f4-d418-4b9f-bb51-e1d17b7f6c5d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471305,"detection_time":1742533600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":56953,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0fdbcde8-b192-4cd9-a6cc-f7e0d4ccc3e2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533600,"event_type_id":6,"status":"blocked"}


event_id: de287776-affc-4cc4-aef6-dc4fbdb08383
log_level: critical
event_category: detections
event_data:
{"connection_id":5471302,"detection_time":1742533600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58666,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a704322c-c9cc-49a6-9c83-dc419826e99c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533600,"event_type_id":6,"status":"blocked"}


event_id: a484c1bd-2857-48c6-b76d-5d6d149b1430
log_level: critical
event_category: detections
event_data:
{"connection_id":5471304,"detection_time":1742533600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":46469,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8c47d9a-cd89-4409-85d9-a8c1225d80bf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533602,"event_type_id":6,"status":"blocked"}


event_id: ef2200cf-cc48-4f58-bfe5-15c11dc34df7
log_level: critical
event_category: detections
event_data:
{"connection_id":5471316,"detection_time":1742533602,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":57197,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e9df02b2-3880-480b-bc9c-022cc1f7934c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533602,"event_type_id":6,"status":"blocked"}


event_id: 52bb91be-ce8c-4645-9fbc-37fe91787e21
log_level: critical
event_category: detections
event_data:
{"connection_id":5471312,"detection_time":1742533602,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23958,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4e65662b-a5f0-42b4-a647-504f68f7a0a8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533603,"event_type_id":6,"status":"blocked"}


event_id: a0c91226-383c-4d04-b95b-3144124dbb6e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471314,"detection_time":1742533603,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":56030,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4138032a-2f52-4054-9315-53beca65a9c3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533603,"event_type_id":6,"status":"blocked"}


event_id: ddbabc58-f770-4147-b5f3-657c4eb62c46
log_level: critical
event_category: detections
event_data:
{"connection_id":5471319,"detection_time":1742533603,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26689,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ae8fdfa7-b190-489a-bd26-3b32abd3b53e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533604,"event_type_id":6,"status":"blocked"}


event_id: 01d81a86-0c6d-4c7b-9efe-90168ce1c824
log_level: critical
event_category: detections
event_data:
{"connection_id":5471321,"detection_time":1742533604,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":20239,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0ffaa900-8543-440e-b494-2c007ced0b6a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533604,"event_type_id":6,"status":"blocked"}


event_id: 4bb01712-9bd6-42c6-a781-f4c989b0f2ea
log_level: critical
event_category: detections
event_data:
{"connection_id":5471324,"detection_time":1742533604,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65427,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7a95d930-95fd-4599-83c3-de8b160ae2ea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533605,"event_type_id":6,"status":"blocked"}


event_id: 1bad91ea-19a9-4084-8539-df83328ad1b3
log_level: critical
event_category: detections
event_data:
{"connection_id":5471326,"detection_time":1742533605,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":32777,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3683cb1b-dc2e-44e0-8e0a-f22cfc318033
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533605,"event_type_id":6,"status":"blocked"}


event_id: 1d9185e6-d979-4c8e-bdfa-df353c0d9ddb
log_level: critical
event_category: detections
event_data:
{"connection_id":5471325,"detection_time":1742533605,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50528,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 99e0a836-c990-42ab-b433-605c3970bc4b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533605,"event_type_id":6,"status":"blocked"}


event_id: 5f14fb81-735d-41c3-bf09-e1f9025911d9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471328,"detection_time":1742533605,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":64528,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a3478b9d-3f94-49c6-bcaa-9e1d02cf1819
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533605,"event_type_id":6,"status":"blocked"}


event_id: 3a73b1f9-55a2-4601-84e4-fc61bb1e3a93
log_level: critical
event_category: detections
event_data:
{"connection_id":5471331,"detection_time":1742533605,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58845,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 28863866-dcdc-4a7a-be49-eeff5a0c2893
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533606,"event_type_id":6,"status":"blocked"}


event_id: 81289287-28c2-4b9a-82a6-f82e748e57e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5471320,"detection_time":1742533606,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":64356,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af1737c9-53ea-414e-add1-4fae60e0808c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533607,"event_type_id":6,"status":"blocked"}


event_id: 614fc277-3c8b-4f22-ae71-9273ab6e74cc
log_level: critical
event_category: detections
event_data:
{"connection_id":5471337,"detection_time":1742533607,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60719,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 68a3792e-e990-4e51-a1d3-0989661dd06a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533607,"event_type_id":6,"status":"blocked"}


event_id: 3ac8369c-742a-41e6-b780-68e21f73107d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471338,"detection_time":1742533607,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":33214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc0a28a6-7731-4cbb-82a5-7f089e5ed5ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533608,"event_type_id":6,"status":"blocked"}


event_id: 6238239d-d00f-4304-bfe8-f6a73c8e7d61
log_level: critical
event_category: detections
event_data:
{"connection_id":5471339,"detection_time":1742533608,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":34822,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: adc9b80c-73b4-45d1-a500-4bcac26bfc7a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533609,"event_type_id":6,"status":"blocked"}


event_id: b610624a-43f4-4406-a8d4-680c75282a2d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471343,"detection_time":1742533609,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57277,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 331b8f74-94b9-4264-a246-318068e15b9a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471345,"detection_time":1742533609,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58136,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 12edab81-b078-4c65-af3e-8ac578dbb70d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533609,"event_type_id":6,"status":"blocked"}


event_id: e06b2dc3-2acf-4544-87ed-5b6bc37fa9c8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471353,"detection_time":1742533609,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":60584,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd496216-7ff8-4c9d-be3a-4b5904a44b21
log_level: critical
event_category: detections
event_data:
{"connection_id":5471349,"detection_time":1742533609,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60221,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2e5a313b-a089-42c4-abba-9848cfa35f1c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533610,"event_type_id":6,"status":"blocked"}


event_id: b7f74067-2aea-44fb-848c-a9a2dabfd9b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471352,"detection_time":1742533610,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":17177,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b4182b0f-5750-4507-8b54-75fbf8349c01
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533610,"event_type_id":6,"status":"blocked"}


event_id: 9a425b1d-4234-4063-b399-5763f97459ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5471355,"detection_time":1742533610,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":53691,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 73de91ae-6881-4282-97f8-c83377a52bca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533611,"event_type_id":6,"status":"blocked"}


event_id: 4e55fe4f-411d-4850-a22b-069c425c752d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471374,"detection_time":1742533611,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":57061,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1fc39834-0774-4a84-86d8-7e36b24954cd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533611,"event_type_id":6,"status":"blocked"}


event_id: 6a418a43-ee37-4e0d-a278-bc50f3074cc5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471376,"detection_time":1742533611,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":47866,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1f680075-ea03-4199-8541-c7d9655519d7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533611,"event_type_id":6,"status":"blocked"}


event_id: 82329dbc-0807-4d0a-9a0b-6420b8e55eea
log_level: critical
event_category: detections
event_data:
{"connection_id":5471378,"detection_time":1742533611,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55235,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b2bd14aa-06aa-47a5-a4f2-228b418b6f07
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533612,"event_type_id":6,"status":"blocked"}


event_id: 3a247042-098b-4850-8952-cb5192b55dee
log_level: critical
event_category: detections
event_data:
{"connection_id":5471381,"detection_time":1742533612,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":23986,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d85f9be-bffe-4755-9800-11709d2814cd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533612,"event_type_id":6,"status":"blocked"}


event_id: 4adb224b-c858-43f4-adcc-c2fd8196ac9c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471368,"detection_time":1742533612,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":11902,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: da25513e-125c-44e9-ad4c-f57668350634
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533613,"event_type_id":6,"status":"blocked"}


event_id: f6369c94-99af-44d8-a394-8176a9d9ef95
log_level: critical
event_category: detections
event_data:
{"connection_id":5471386,"detection_time":1742533613,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52113,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d3c2aa00-c84c-43c2-8afc-5789fecb8588
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533614,"event_type_id":6,"status":"blocked"}


event_id: eefa9522-b0a1-473e-a0d0-44c04b607a04
log_level: critical
event_category: detections
event_data:
{"connection_id":5471401,"detection_time":1742533614,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":59896,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7b1464bf-9ff6-4e54-aff1-eb8fa17dd732
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533616,"event_type_id":6,"status":"blocked"}


event_id: 3426b78c-048f-4603-b7fa-de671b348618
log_level: critical
event_category: detections
event_data:
{"connection_id":5471403,"detection_time":1742533616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":39543,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6abe9ce3-636d-4bb4-a777-456b56ee8d36
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533616,"event_type_id":6,"status":"blocked"}


event_id: c415c109-cd0c-4466-a65d-6862fd64d46b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471412,"detection_time":1742533616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":3806,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 171d0e8a-d8b5-4343-9c91-d2f79150dd8c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533616,"event_type_id":6,"status":"blocked"}


event_id: 864bc0ea-6e20-47ed-8a30-8b9ef0d9824a
log_level: critical
event_category: detections
event_data:
{"connection_id":5471404,"detection_time":1742533616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61829,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2711d816-9c42-409d-909b-57d5e3396eb3
log_level: critical
event_category: detections
event_data:
{"connection_id":5471407,"detection_time":1742533616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63222,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d2f600cc-20ac-4042-ba25-b2d9629ba7d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5471410,"detection_time":1742533616,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":42657,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58e77c67-a91e-4e7b-8ebf-35ebf787051e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533618,"event_type_id":6,"status":"blocked"}


event_id: 207d7b41-f9ef-4554-b3b0-d0bb8424f871
log_level: critical
event_category: detections
event_data:
{"connection_id":5471397,"detection_time":1742533618,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":19853,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 95c2a7e0-23f5-4198-a126-94af562ffc25
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533620,"event_type_id":6,"status":"blocked"}


event_id: 65d90b46-fe9b-4ea9-a15e-ed56fef08801
log_level: critical
event_category: detections
event_data:
{"connection_id":5471422,"detection_time":1742533620,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23536,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 17fc3106-3846-46c0-b377-c8036a911376
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533620,"event_type_id":6,"status":"blocked"}


event_id: 7640e6bc-feda-4118-a12f-d4e5986a25db
log_level: critical
event_category: detections
event_data:
{"connection_id":5471420,"detection_time":1742533620,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59699,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5dca15a0-ce1f-4554-8541-39f55710cc15
log_level: critical
event_category: detections
event_data:
{"connection_id":5471425,"detection_time":1742533620,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26150,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6f0c239c-f892-4a39-ad50-e9d0a6d911a0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533621,"event_type_id":6,"status":"blocked"}


event_id: 393b830d-0ee0-4c44-ae93-6e0855a092e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5471427,"detection_time":1742533621,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53466,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ce72eda3-aa3f-47c6-9978-4e313e5f20f4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533621,"event_type_id":6,"status":"blocked"}


event_id: fddf24ca-6333-4cb0-bc6f-d482b7c5ad02
log_level: critical
event_category: detections
event_data:
{"connection_id":5471428,"detection_time":1742533621,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61565,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80fb7086-27fd-4da8-a8c1-5e23eaff01a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5471430,"detection_time":1742533621,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55056,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d3c0e67e-c8df-40cc-8734-6f103a28a9dd
log_level: critical
event_category: detections
event_data:
{"connection_id":5471431,"detection_time":1742533621,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56833,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2123a223-a7e9-4c98-bf0a-03842c160ae8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533622,"event_type_id":6,"status":"blocked"}


event_id: c1702aea-1666-42ef-a33c-52ed1d731e52
log_level: critical
event_category: detections
event_data:
{"connection_id":5471435,"detection_time":1742533622,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":23106,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9c39827d-5160-4145-95b8-e3f4a2c859de
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533622,"event_type_id":6,"status":"blocked"}


event_id: aa515995-c9b2-467e-bc7f-5de4543a0646
log_level: critical
event_category: detections
event_data:
{"connection_id":5471440,"detection_time":1742533622,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":57950,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d6266881-42d9-44de-8b4a-a15836b4da5f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533623,"event_type_id":6,"status":"blocked"}


event_id: bd76a8f3-21b1-4ca8-be57-5b6cf6fce92c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471438,"detection_time":1742533623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51840,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cdf56211-4d51-4f83-9ae0-2ea8dd67d3b4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533624,"event_type_id":6,"status":"blocked"}


event_id: e5d68e1d-050e-48aa-89dc-3abc429a1b62
log_level: critical
event_category: detections
event_data:
{"connection_id":5471445,"detection_time":1742533624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":4846,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 02db8d96-348a-4ef4-9652-ae2212e91b54
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533624,"event_type_id":6,"status":"blocked"}


event_id: c7373573-6499-4020-b70b-c5a600c61d1b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471447,"detection_time":1742533624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":38614,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f09d0c17-0883-4e57-a58d-ce9bc9748fd9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533624,"event_type_id":6,"status":"blocked"}


event_id: 72422e8c-a67c-4998-8494-0b7efdbd1d9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471448,"detection_time":1742533624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":39834,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5fbdd4a1-f175-4006-9818-24b0aa68b83e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471449,"detection_time":1742533624,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":7081,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6097766e-8207-4122-9adc-6309c4f704f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533625,"event_type_id":6,"status":"blocked"}


event_id: 920a528f-6d2d-4800-8aaa-b9c835fbcb6d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471451,"detection_time":1742533625,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":47396,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b5ca5d51-5d39-4c87-a001-1b23d3c47337
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533626,"event_type_id":6,"status":"blocked"}


event_id: ed433d23-3090-43cf-8d58-db67c5a2440d
log_level: critical
event_category: detections
event_data:
{"connection_id":5471456,"detection_time":1742533626,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13348,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7855d32b-88b9-4915-b40c-3ca729730787
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533626,"event_type_id":6,"status":"blocked"}


event_id: 7e75d005-b574-4440-bbec-1bfbc98fc7b8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471457,"detection_time":1742533626,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":47623,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bac017d2-131f-40a8-ad9c-a4a31f0c6ab2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533627,"event_type_id":6,"status":"blocked"}


event_id: 9788590f-2983-4677-a095-6734cc95fb71
log_level: critical
event_category: detections
event_data:
{"connection_id":5471462,"detection_time":1742533627,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39792,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e5d42301-06ef-4206-8409-298b6c920b57
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533627,"event_type_id":6,"status":"blocked"}


event_id: dafa69fa-b9e3-4e65-bd7e-ef7562187bf6
log_level: critical
event_category: detections
event_data:
{"connection_id":5471466,"detection_time":1742533627,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":52326,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cb569d35-83ac-43d4-8d38-65cc02f6032e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471467,"detection_time":1742533627,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":42240,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6c97671b-db26-4ec2-bf68-c261b8de2ef1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533628,"event_type_id":6,"status":"blocked"}


event_id: 324d5673-6a1e-4c30-bf78-877007f4f3c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5471468,"detection_time":1742533628,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58272,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4ec8c655-1fba-47ab-b461-c54fbcc8a0e7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533628,"event_type_id":6,"status":"blocked"}


event_id: 9361552c-f8b8-4347-8497-6c19912a6a2f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471481,"detection_time":1742533628,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":62848,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fdaa0696-e0e3-4148-8fe2-8548336bd484
log_level: critical
event_category: detections
event_data:
{"connection_id":5471469,"detection_time":1742533628,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59384,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 18416228-6455-4872-b582-d48bed85a714
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533629,"event_type_id":6,"status":"blocked"}


event_id: efafbf94-a42b-4bec-82b9-402d93adca66
log_level: critical
event_category: detections
event_data:
{"connection_id":5471472,"detection_time":1742533629,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":57444,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7fac2415-a20a-4fd0-8229-cfcfa0e7b78e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471473,"detection_time":1742533629,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":57484,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 40d0bb3a-34ea-4c0f-8657-e8eab7ed8ed1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533630,"event_type_id":6,"status":"blocked"}


event_id: 86cac597-025f-4072-8876-8faf1401e74f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471483,"detection_time":1742533630,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":50161,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de41269d-c077-4bdb-b3ef-ae3405aaab29
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533630,"event_type_id":6,"status":"blocked"}


event_id: 984ac4f5-034a-4257-ae73-c81969b47b3b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471484,"detection_time":1742533630,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":26956,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f3b199d4-a7d4-465a-8240-905e77f4fe39
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533630,"event_type_id":6,"status":"blocked"}


event_id: 10aab55a-2302-4d31-9b5e-df4c5d2ec8a9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471479,"detection_time":1742533630,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":59427,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d68d919-7be9-450f-bf15-cd68e066be1d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533631,"event_type_id":6,"status":"blocked"}


event_id: a023828f-0a6c-4f0d-a6eb-e5452acf78ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5471493,"detection_time":1742533631,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58876,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7d62236-d056-42a1-b028-57bc5c13baf4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533632,"event_type_id":6,"status":"blocked"}


event_id: f07d8440-c729-4088-b85d-b30d8542bfef
log_level: critical
event_category: detections
event_data:
{"connection_id":5471490,"detection_time":1742533632,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":4262,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6f258f4a-b372-4009-b1c6-6b18dce36174
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533632,"event_type_id":6,"status":"blocked"}


event_id: 79bb50c6-88ce-4bf8-b081-965683445367
log_level: critical
event_category: detections
event_data:
{"connection_id":5471496,"detection_time":1742533632,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":36151,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d361fa56-a5d0-4f5b-a4b3-281f987e3921
log_level: critical
event_category: detections
event_data:
{"connection_id":5471501,"detection_time":1742533632,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":7299,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e7373700-f139-423d-8307-8af2250d1e2d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533633,"event_type_id":6,"status":"blocked"}


event_id: c0e2fb46-b096-48f2-bb4d-0afc880e22c9
log_level: critical
event_category: detections
event_data:
{"connection_id":5471498,"detection_time":1742533633,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50087,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b6a97a1a-5a6e-4196-b1d1-32b56b5a6a23
log_level: critical
event_category: detections
event_data:
{"connection_id":5471502,"detection_time":1742533633,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51456,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fe16de3c-7c54-4bf3-9b5e-830152f46693
log_level: critical
event_category: detections
event_data:
{"connection_id":5471503,"detection_time":1742533633,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53234,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 63aedf86-b953-4911-9c1f-43f9c82b7254
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533634,"event_type_id":6,"status":"blocked"}


event_id: ba5316f3-a14e-42fc-954e-4964aa0a1f7e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471507,"detection_time":1742533634,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":65194,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 879775f6-14f1-4003-9f3c-28cf490686e7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533634,"event_type_id":6,"status":"blocked"}


event_id: fb894880-35cd-4b9b-a7e9-904993fd34e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5471508,"detection_time":1742533634,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":12833,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9b16babe-ce17-4bf0-adc1-7f72d4182bef
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533634,"event_type_id":6,"status":"blocked"}


event_id: 653eaef4-096e-4fda-9a7e-6757f37a32ce
log_level: critical
event_category: detections
event_data:
{"connection_id":5471510,"detection_time":1742533634,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":44626,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ace6dc3d-096c-4cb5-9b79-c237d0b4cd5e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533635,"event_type_id":6,"status":"blocked"}


event_id: abdb04f0-9d7b-4064-8310-d9737c8a91eb
log_level: critical
event_category: detections
event_data:
{"connection_id":5471512,"detection_time":1742533635,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":1527,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 661e23d1-2ac6-47c1-b2a3-d6e1d7bf1d6b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533635,"event_type_id":6,"status":"blocked"}


event_id: 050c0521-74cc-4681-9531-f726e26a8a77
log_level: critical
event_category: detections
event_data:
{"connection_id":5471511,"detection_time":1742533635,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64720,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9e6288be-d3bc-4c86-a12d-d3f670581b40
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533635,"event_type_id":6,"status":"blocked"}


event_id: 780301e6-5c26-42dc-81e3-475e94282358
log_level: critical
event_category: detections
event_data:
{"connection_id":5471513,"detection_time":1742533635,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63364,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a36cd014-a4c9-4d89-927c-cc79d04f7780
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533637,"event_type_id":6,"status":"blocked"}


event_id: eedb02bc-61c8-4687-8797-3db8c380465f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471520,"detection_time":1742533637,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":13588,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8cc717bf-32fc-4687-b090-9cfdb78e8a1e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533637,"event_type_id":6,"status":"blocked"}


event_id: d1988b8b-f48a-4861-aca2-732819545941
log_level: critical
event_category: detections
event_data:
{"connection_id":5471527,"detection_time":1742533637,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":53392,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b2f7ea2-df55-435f-98a0-4a3206532b21
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533638,"event_type_id":6,"status":"blocked"}


event_id: ca4b2001-7d60-4034-88f6-186ab009c93f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471524,"detection_time":1742533638,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":15093,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f1040838-1808-46b7-a0f3-6ffd62324fc4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533639,"event_type_id":6,"status":"blocked"}


event_id: 2b0c6bab-5e06-4765-ac56-1f0ca624eb72
log_level: critical
event_category: detections
event_data:
{"connection_id":5471529,"detection_time":1742533639,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":62050,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf3e686c-29e1-46e9-8db5-a07d9faff5d8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533640,"event_type_id":6,"status":"blocked"}


event_id: 2765cbb3-4468-481f-936c-9371cbaab4ef
log_level: critical
event_category: detections
event_data:
{"connection_id":5471530,"detection_time":1742533640,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55205,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ccf5a81d-a465-40c1-a13b-a425aca288b1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533640,"event_type_id":6,"status":"blocked"}


event_id: 4d2d1518-70ea-4c67-88db-0914ffc42a31
log_level: critical
event_category: detections
event_data:
{"connection_id":5471532,"detection_time":1742533640,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":34096,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a73d36f3-8c75-49ed-ac81-ab0beef56387
log_level: critical
event_category: detections
event_data:
{"connection_id":5471533,"detection_time":1742533640,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56332,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8ed5f255-9af1-4b0d-b2af-9990e703d3c2
log_level: critical
event_category: detections
event_data:
{"connection_id":5471536,"detection_time":1742533640,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":37323,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e1150ed9-65fc-4f52-af8d-f6b125330982
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533641,"event_type_id":6,"status":"blocked"}


event_id: 194f7aaa-e00f-4f2e-b6fe-f65a504d7d4e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471531,"detection_time":1742533641,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":19060,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a3dbe931-be57-49cf-8fb1-dfbf6053694e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533641,"event_type_id":6,"status":"blocked"}


event_id: 4309b9cc-4058-4f84-8592-42d2c482a43b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471539,"detection_time":1742533641,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":4513,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1f9c862b-b0a4-4b80-b187-8f06ebfe1c8b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533641,"event_type_id":6,"status":"blocked"}


event_id: f91bfe97-d99c-4cbd-8a15-d431f0f88dea
log_level: critical
event_category: detections
event_data:
{"connection_id":5471540,"detection_time":1742533641,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":28224,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 73abe35a-85e6-497f-8b66-106e7ec729c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533642,"event_type_id":6,"status":"blocked"}


event_id: f8326300-55c2-4cd2-801c-265ed28bbb89
log_level: critical
event_category: detections
event_data:
{"connection_id":5471548,"detection_time":1742533642,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":49475,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 239b217f-e28d-44e3-8e41-17ec54041d69
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533642,"event_type_id":6,"status":"blocked"}


event_id: 995dd1c8-ec73-4126-847e-2a9001c3e461
log_level: critical
event_category: detections
event_data:
{"connection_id":5471545,"detection_time":1742533642,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":32542,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ca6726b-758c-42f2-ae7f-103523050e3d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533643,"event_type_id":6,"status":"blocked"}


event_id: 725758bb-af6c-4132-b862-260e89753713
log_level: critical
event_category: detections
event_data:
{"connection_id":5471547,"detection_time":1742533643,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":50100,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80ebeecd-0d8e-4c83-9ce3-0909151ec23b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533643,"event_type_id":6,"status":"blocked"}


event_id: f13138e6-fca3-401f-8aa7-bdbd4e33da89
log_level: critical
event_category: detections
event_data:
{"connection_id":5471553,"detection_time":1742533643,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":59293,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1639498d-6821-452e-8c4a-9144cfe25ec2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533643,"event_type_id":6,"status":"blocked"}


event_id: beaabc7d-38a6-4c4c-8bce-ba11c3b87f37
log_level: critical
event_category: detections
event_data:
{"connection_id":5471554,"detection_time":1742533643,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":57382,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3a92369b-2157-4335-8dee-1bbce3fddb23
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"199.27.221.21","autoblock_timeout":25,"detection_time":1742533644,"event_type_id":6,"status":"blocked"}


event_id: 894a5fec-9eb4-4602-971d-fe7dcb6e8ed8
log_level: critical
event_category: detections
event_data:
{"connection_id":5471562,"detection_time":1742533644,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"199.27.221.21","remote_port":58014,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4d636732-c8eb-4514-8d41-88f365c579e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533644,"event_type_id":6,"status":"blocked"}


event_id: 2bb56805-8108-4670-a863-fa0d94e8f840
log_level: critical
event_category: detections
event_data:
{"connection_id":5471556,"detection_time":1742533644,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63181,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 04f90b09-e433-4c75-a1f8-318430521eb5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533645,"event_type_id":6,"status":"blocked"}


event_id: 8636dc3b-646f-44d0-ba82-239198e880f6
log_level: critical
event_category: detections
event_data:
{"connection_id":5471557,"detection_time":1742533645,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64055,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88a7f18e-0fa5-4962-a8d9-3cde97b01604
log_level: critical
event_category: detections
event_data:
{"connection_id":5471558,"detection_time":1742533645,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65531,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fe605f8c-4bf2-4929-97a2-66191ab111c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533645,"event_type_id":6,"status":"blocked"}


event_id: 3aefa93d-6209-4fff-a8da-ae489cb62194
log_level: critical
event_category: detections
event_data:
{"connection_id":5471563,"detection_time":1742533645,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":19939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 943d4859-b7ce-4c89-9e33-e6091aa3ca44
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533646,"event_type_id":6,"status":"blocked"}


event_id: d2c6e59d-7464-484d-8349-6e1e420c9f5f
log_level: critical
event_category: detections
event_data:
{"connection_id":5471564,"detection_time":1742533646,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":22791,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b8fce286-b726-4601-9900-44ded36c6801
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533647,"event_type_id":6,"status":"blocked"}


event_id: 9ad36064-a2f2-4a18-bc28-7438537359ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5471569,"detection_time":1742533647,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":48656,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e67a3f1f-f879-4f79-9080-84405c392665
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533647,"event_type_id":6,"status":"blocked"}


event_id: 6c72bf18-51f4-40aa-8219-205ba99abf59
log_level: critical
event_category: detections
event_data:
{"connection_id":5471571,"detection_time":1742533647,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60953,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7c939716-560d-4bce-9287-23d0ac47dad7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533649,"event_type_id":6,"status":"blocked"}


event_id: 6e6ab653-7ab9-432c-b14f-ea8d062822a3
log_level: critical
event_category: detections
event_data:
{"connection_id":5471591,"detection_time":1742533649,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":40907,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ce95abdb-a605-4f7a-b05d-0b5fbb2e77c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533649,"event_type_id":6,"status":"blocked"}


event_id: ebe06b87-34fa-4ee6-9361-f6a47fd56dde
log_level: critical
event_category: detections
event_data:
{"connection_id":5471592,"detection_time":1742533649,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6449,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ff2fd538-dcd8-4cdb-b293-b9b357f37eec
log_level: critical
event_category: detections
event_data:
{"connection_id":5471579,"detection_time":1742533649,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3791,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b6a73d85-27c2-47b1-bd51-d2adf42632e5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533651,"event_type_id":6,"status":"blocked"}


event_id: 6a8ad626-2daa-437d-9eb8-3e3990d622e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5471609,"detection_time":1742533651,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":50778,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9afcdbf3-9d78-476c-b19c-b47808f4b98d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533651,"event_type_id":6,"status":"blocked"}


event_id: d180f472-28f6-427b-9f61-1e5fec9cba49
log_level: critical
event_category: detections
event_data:
{"connection_id":5471606,"detection_time":1742533651,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51607,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9927caff-7bc2-49ca-8386-549528758adb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533652,"event_type_id":6,"status":"blocked"}


event_id: 5652934f-7ca2-4c81-8389-c24cf337d392
log_level: critical
event_category: detections
event_data:
{"connection_id":5471608,"detection_time":1742533652,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52801,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b02f77c-7216-4dc6-92b5-35a76c4b8730
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533652,"event_type_id":6,"status":"blocked"}


event_id: cefb6c21-599c-497c-b7b5-99abe6995b50
log_level: critical
event_category: detections
event_data:
{"connection_id":5471610,"detection_time":1742533652,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":53544,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 326b3731-8ffe-4d10-a02f-ff1689487c1d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533652,"event_type_id":6,"status":"blocked"}


event_id: 8ca6627a-0330-4e42-a7cc-d88e1661b588
log_level: critical
event_category: detections
event_data:
{"connection_id":5471611,"detection_time":1742533652,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":3343,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0be49152-0888-4bea-a48f-9714cf5f4330
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533653,"event_type_id":6,"status":"blocked"}


event_id: d4190417-9bd6-4559-ae53-5863c57b03f4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471613,"detection_time":1742533653,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":49214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fc006351-577a-46c9-b010-888df192661b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533653,"event_type_id":6,"status":"blocked"}


event_id: ef3c9016-15f5-4c88-8e29-4611874b168b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471614,"detection_time":1742533653,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":20060,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a0e55a2-4e5d-4e4e-ac0f-e0576321197e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533654,"event_type_id":6,"status":"blocked"}


event_id: 3d032b4c-4ab7-4368-a8f9-e5ca5fb3fe51
log_level: critical
event_category: detections
event_data:
{"connection_id":5471616,"detection_time":1742533654,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":51865,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c7406b01-33b0-4d4d-a7fa-ae37907e4f2e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533655,"event_type_id":6,"status":"blocked"}


event_id: 955d9ddf-453d-41bc-8b63-79f4cae15d59
log_level: critical
event_category: detections
event_data:
{"connection_id":5471620,"detection_time":1742533655,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":51454,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f3943009-4308-452a-a157-cf014a498a8c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533656,"event_type_id":6,"status":"blocked"}


event_id: 5db6ca4c-0c43-4307-beab-195893b2acf2
log_level: critical
event_category: detections
event_data:
{"connection_id":5471624,"detection_time":1742533656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":58198,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66dbe5e5-50ef-4f6f-89f0-fa258141d3cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533656,"event_type_id":6,"status":"blocked"}


event_id: 0b71f548-3e87-41e0-bf3f-4931b3f2955b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471625,"detection_time":1742533656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":28383,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6576c27a-4f6f-4f6b-945b-e3db48f84e40
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533656,"event_type_id":6,"status":"blocked"}


event_id: 07e1aebe-c7a7-4d3d-9131-ef16209a84b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471629,"detection_time":1742533656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59489,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 94de0899-d067-422d-a866-43103f6e7975
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533656,"event_type_id":6,"status":"blocked"}


event_id: 840f0ba8-b303-4a92-9389-86dfaa9406a4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471627,"detection_time":1742533656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":55621,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0f59c82f-c72d-43a1-8c77-42a1a19d08ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742533656,"event_type_id":6,"status":"blocked"}


event_id: f17df44f-9228-471a-bb9d-b4415e286854
log_level: critical
event_category: detections
event_data:
{"connection_id":5471637,"detection_time":1742533656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":52486,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7535b5bb-a467-4561-9789-144e63ce1ce3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533657,"event_type_id":6,"status":"blocked"}


event_id: a0b90541-8831-4968-afa5-86bdb8da79aa
log_level: critical
event_category: detections
event_data:
{"connection_id":5471633,"detection_time":1742533657,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19791,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e08e52d7-792b-4a45-9137-c9ab0924f3a0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533657,"event_type_id":6,"status":"blocked"}


event_id: dc2b3079-e1f9-4d08-8842-a58c2d44dd9b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471631,"detection_time":1742533657,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61067,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0bccf23a-5d15-4a0c-984c-2f20b3859f45
log_level: critical
event_category: detections
event_data:
{"connection_id":5471632,"detection_time":1742533657,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62253,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8ba410ae-9d16-46f3-8180-25d857aba96b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533657,"event_type_id":6,"status":"blocked"}


event_id: 8a49ff05-e425-42ed-89f9-f171dbc7be22
log_level: critical
event_category: detections
event_data:
{"connection_id":5471635,"detection_time":1742533657,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":32561,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed5368ca-0e70-4b44-bd22-66704fc7faff
log_level: critical
event_category: detections
event_data:
{"connection_id":5471638,"detection_time":1742533657,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":22807,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6714b7c3-010f-49a3-895b-686f7e5c31f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533659,"event_type_id":6,"status":"blocked"}


event_id: 32c9e3eb-e932-4dac-82fd-3462ad8d8121
log_level: critical
event_category: detections
event_data:
{"connection_id":5471643,"detection_time":1742533659,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57654,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af82f422-03e7-4df0-a532-aceaf01993ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533659,"event_type_id":6,"status":"blocked"}


event_id: 3562baad-785f-46f2-a48a-6c566bdc7318
log_level: critical
event_category: detections
event_data:
{"connection_id":5471646,"detection_time":1742533659,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":7676,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5df5b289-ac3a-49e2-9cb9-bb78f03a9abd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742533659,"event_type_id":6,"status":"blocked"}


event_id: 44719d97-e3a5-47db-980b-1b119e4fdbe4
log_level: critical
event_category: detections
event_data:
{"connection_id":5471647,"detection_time":1742533659,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":56689,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f35e3db8-fabb-4576-86f7-f188bae2abdd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533660,"event_type_id":6,"status":"blocked"}


event_id: febf5ab1-739a-474c-92c4-da0e57a3df05
log_level: critical
event_category: detections
event_data:
{"connection_id":5471649,"detection_time":1742533660,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":30940,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4a0ab3a4-0728-4b74-9357-0d15f9cf4b30
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533661,"event_type_id":6,"status":"blocked"}


event_id: e7533568-2248-4366-828b-f43efa8a3e3e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471653,"detection_time":1742533661,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":49200,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 23849ba9-95a8-429a-a48d-93e6da74fa7a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533662,"event_type_id":6,"status":"blocked"}


event_id: d864bbf6-2697-4441-a5b6-b0ebda884f95
log_level: critical
event_category: detections
event_data:
{"connection_id":5471656,"detection_time":1742533662,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":16604,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8b23a75-1bdd-4145-9223-99b043173ca3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533662,"event_type_id":6,"status":"blocked"}


event_id: beb6059e-6188-46ce-be56-5a17cbf7263e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471659,"detection_time":1742533662,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":52083,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0f2c7390-6ce8-4f82-a688-46487fb169c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742533663,"event_type_id":6,"status":"blocked"}


event_id: 51e8751f-1dd1-457a-b7f6-da1e64e90a2e
log_level: critical
event_category: detections
event_data:
{"connection_id":5471675,"detection_time":1742533663,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":61028,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb067d36-4f0a-4cf1-97d7-5c0920178eb5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533663,"event_type_id":6,"status":"blocked"}


event_id: bb643c3e-70ec-43dd-b4a5-5427b2571139
log_level: critical
event_category: detections
event_data:
{"connection_id":5471663,"detection_time":1742533663,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64303,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 41681bde-6273-454d-853e-94894c824f10
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742533664,"event_type_id":6,"status":"blocked"}


event_id: 3c7121e8-1c74-457d-8c6c-39addde8e717
log_level: critical
event_category: detections
event_data:
{"connection_id":5471664,"detection_time":1742533664,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":58098,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8cf149c4-eca0-412c-bc93-d75db45a5ff7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742533664,"event_type_id":6,"status":"blocked"}


event_id: 41324492-22a4-4452-b2b0-a036058a552c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471665,"detection_time":1742533664,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":45617,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dbdfe960-0d5d-47d3-bb32-7dd9bff7d31b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742533664,"event_type_id":6,"status":"blocked"}


event_id: bfbb4dc2-2e10-452e-bc4e-fea02a30563c
log_level: critical
event_category: detections
event_data:
{"connection_id":5471666,"detection_time":1742533664,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49343,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c033ea4b-1f06-447a-8828-bf6f7b762be3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742533664,"event_type_id":6,"status":"blocked"}


event_id: 38bf8644-12a8-4842-97d9-d6aea76a3424
log_level: critical
event_category: detections
event_data:
{"connection_id":5471668,"detection_time":1742533664,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":25032,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ad1e915b-d1b6-4032-b437-571cfb418c2c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742533665,"event_type_id":6,"status":"blocked"}


event_id: d20c5cc3-3ca1-4176-b71b-3ba0aa8c8c0b
log_level: critical
event_category: detections
event_data:
{"connection_id":5471677,"detection_time":1742533665,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51265,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 95716a4b-7b7b-47fb-9361-19da8743aaa5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742533666,"event_type_id":6,"status":"blocked"}


event_id: 5c6f507e-d4b1-4a57-acf1-66040c3b29e5
log_level: critical
event_category: detections
event_data:
{"connection_id":5471690,"detection_time":1742533666,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":65160,"status":"detected","threat_name":"RDP:BruteForce"}


