add: bph report iocs

1 files changed, 134 insertions, 0 deletions

diff --git a/kevlar/2026-08-31/honeylabs/events-AS198953.ndjson b/kevlar/2026-08-31/honeylabs/events-AS198953.ndjson
new file mode 100644
index 0000000..0baf647
--- /dev/null
+++ b/kevlar/2026-08-31/honeylabs/events-AS198953.ndjson
@@ -0,0 +1,134 @@
+{"timestamp": "2026-08-24T23:24:43", "event_id": "7b065982-1f58-4363-acc5-08e773e9e3d2", "source_ip": "176.120.22.240", "source_port": 63464, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 34, "dest_bytes": 14, "network_bytes": 48, "event_summary": "\u0003\u0000\u0000\"\u001d\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=test\r\n"}
+{"timestamp": "2026-08-24T23:24:43", "event_id": "64fae195-6e4a-4e1d-a740-f4eba9b30502", "source_ip": "176.120.22.240", "source_port": 63527, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6379, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 34, "dest_bytes": 5, "network_bytes": 39, "event_summary": "\u0003\u0000\u0000\"\u001d\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=test\r\n"}
+{"timestamp": "2026-08-25T17:44:29", "event_id": "aeb4d906-8c02-446e-980f-b69f95d28fcd", "source_ip": "176.120.22.61", "source_port": 43023, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7788, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:28", "event_id": "ab880744-2e86-4e22-bc41-dcf517e7f700", "source_ip": "176.120.22.61", "source_port": 33440, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1434, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:28", "event_id": "9ad6a857-0c62-4535-8ffe-23a4657f92c3", "source_ip": "176.120.22.61", "source_port": 27756, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:27", "event_id": "71985b33-7b8c-4095-bca6-4a109d31eb58", "source_ip": "176.120.22.61", "source_port": 18067, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3005, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:27", "event_id": "a6c54efc-8670-4e23-aabb-6fc12681e0b1", "source_ip": "176.120.22.61", "source_port": 14644, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 28433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 104000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:27", "event_id": "68d7462f-241a-49b1-9423-3d2a48146606", "source_ip": "176.120.22.61", "source_port": 12782, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1501, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:27", "event_id": "dcf074b8-20cf-4e33-b065-c5ca4d08fe12", "source_ip": "176.120.22.61", "source_port": 10515, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5367, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:26", "event_id": "8bee6654-134c-42f2-a95f-aa3e0a2ecfd1", "source_ip": "176.120.22.61", "source_port": 6933, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 13433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 102000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:26", "event_id": "cc3f6a2c-20c6-4895-bcea-692ba7846e22", "source_ip": "176.120.22.61", "source_port": 1246, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1444, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:26", "event_id": "5452c6f7-3a70-4bff-8cf5-88154418d82e", "source_ip": "176.120.22.61", "source_port": 58596, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 11433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:25", "event_id": "61880cd2-865d-4760-94ff-2824abd6618f", "source_ip": "176.120.22.61", "source_port": 51637, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2999, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:25", "event_id": "6fa93b8f-729d-4343-85b4-b31629322757", "source_ip": "176.120.22.61", "source_port": 48600, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:25", "event_id": "e1f51111-eaa0-4f18-9202-642a0ae02652", "source_ip": "176.120.22.61", "source_port": 48578, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 12433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:25", "event_id": "284ca315-7a69-4e4a-8a5b-77856806e611", "source_ip": "176.120.22.61", "source_port": 47643, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:25", "event_id": "1affc509-74a8-44db-ba32-f5f2b0dae89c", "source_ip": "176.120.22.61", "source_port": 45262, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9999, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:24", "event_id": "9a2fcf2d-7a4d-47e7-9531-155661e4e42f", "source_ip": "176.120.22.61", "source_port": 36443, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1002, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:24", "event_id": "dc9a781d-5ea9-45d2-b29f-aa5294945b06", "source_ip": "176.120.22.61", "source_port": 36302, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6602, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:24", "event_id": "251766e7-fa96-4619-a0a4-ee192da4194a", "source_ip": "176.120.22.61", "source_port": 36251, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:24", "event_id": "a7542363-1811-4a6d-a71a-96dca3ccafd9", "source_ip": "176.120.22.61", "source_port": 33560, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5369, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-25T17:44:24", "event_id": "0119ac2a-aa55-424d-a6eb-01dfbb37b85a", "source_ip": "176.120.22.61", "source_port": 32928, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5368, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-26T23:34:16", "event_id": "8e60c757-742e-430a-bc7a-b9ce2f52f96e", "source_ip": "176.120.22.43", "source_port": 52130, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"content-length\":\"117\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"referrer-policy\":\"strict-origin-when-cross-origin\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"121\\\", \\\"Not A(Brand\\\";v=\\\"99\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"same-origin\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_792d2c6655cb", "tls_client_ja3": "03420579546b5bb7995da3f28c5d0a4d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn18en_9a6afedbb443", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 926, "dest_bytes": 78, "network_bytes": 1004, "event_summary": ""}
+{"timestamp": "2026-08-26T23:34:16", "event_id": "256b4e43-6fe7-4398-b40d-51455c79d279", "source_ip": "176.120.22.43", "source_port": 51748, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "872f0de3821c50e5dbbcb216fe2f9348", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn0400_8b1ed2202073", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 242, "dest_bytes": 78, "network_bytes": 320, "event_summary": ""}
+{"timestamp": "2026-08-26T23:03:42", "event_id": "dddacf65-63f5-4d2b-bd40-1d5413196186", "source_ip": "176.120.22.43", "source_port": 65365, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"content-length\":\"117\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>\",\"priority\":\"u=0, i\",\"referrer-policy\":\"strict-origin-when-cross-origin\",\"sec-ch-ua\":\"\\\"Chromium\\\";v=\\\"121\\\", \\\"Not A(Brand\\\";v=\\\"99\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Windows\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"same-origin\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_792d2c6655cb", "tls_client_ja3": "3c2bebcbcdf3878f1d867d465b49fc7b", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn18en_9a6afedbb443", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 926, "dest_bytes": 78, "network_bytes": 1004, "event_summary": ""}
+{"timestamp": "2026-08-26T23:03:41", "event_id": "12a192ae-4a96-494c-b4ca-551b5c46fff1", "source_ip": "176.120.22.43", "source_port": 58112, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/global-protect/login.esp", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "8efc7ad36009d21e478a281093a5c37f", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0400_8b1ed2202073", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 242, "dest_bytes": 78, "network_bytes": 320, "event_summary": ""}
+{"timestamp": "2026-08-26T18:55:48", "event_id": "ff5a8bb3-a482-492e-9f26-18cf9ed8747a", "source_ip": "176.120.22.43", "source_port": 63429, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/+CSCOE+/logon.html", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"ru,en;q=0.9,en-GB;q=0.8,en-US;q=0.7\",\"cache-control\":\"max-age=0\",\"cookie\":\"sdesktop=\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "70d138c17f4966d5da81466da15bedaa", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11cn06ru_b2fb244bb31f", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 335, "dest_bytes": 78, "network_bytes": 413, "event_summary": ""}
+{"timestamp": "2026-08-26T17:09:58", "event_id": "892ebefb-f315-4f2c-bd5b-40a7c0a6c4aa", "source_ip": "176.120.22.43", "source_port": 53088, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/+CSCOE+/logon.html", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"ru,en;q=0.9,en-GB;q=0.8,en-US;q=0.7\",\"cache-control\":\"max-age=0\",\"cookie\":\"sdesktop=\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "117c9f03c81fe6372a3a63a910bcc349", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11cn06ru_b2fb244bb31f", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 335, "dest_bytes": 78, "network_bytes": 413, "event_summary": ""}
+{"timestamp": "2026-08-26T13:12:31", "event_id": "a2f1db2c-9995-4c48-b32c-962cec95fa83", "source_ip": "193.143.1.66", "source_port": 21657, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3396, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-26T13:12:31", "event_id": "4b07c5d2-9ab2-4e71-8ac8-0f5cdd9bc7cf", "source_ip": "193.143.1.66", "source_port": 21564, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3396, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-26T13:12:31", "event_id": "53474ad4-536d-47bc-92b5-4062981d14e6", "source_ip": "193.143.1.66", "source_port": 21422, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3396, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-26T11:10:35", "event_id": "dc480b5b-9a53-4c42-a355-a2bf8c4c24a8", "source_ip": "193.143.1.66", "source_port": 28171, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-26T11:10:34", "event_id": "80761f83-e94c-4ffe-9f57-bbae14bdee4f", "source_ip": "193.143.1.66", "source_port": 25707, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-26T11:10:34", "event_id": "33f7b2a3-02f8-44ba-8a35-95641506e7b1", "source_ip": "193.143.1.66", "source_port": 23191, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3389, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-27T21:25:45", "event_id": "4c7e4f4a-b329-4843-8571-0128174f6145", "source_ip": "176.120.22.43", "source_port": 63611, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "aed793e929470b8ee9f387ec4a564630", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""}
+{"timestamp": "2026-08-27T16:54:08", "event_id": "018d7b34-6c78-4cdc-980f-4b12def6f38c", "source_ip": "176.120.22.61", "source_port": 62386, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1435, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:07", "event_id": "e736f13a-abde-45f8-af4e-8b79c9a9da62", "source_ip": "176.120.22.61", "source_port": 64448, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5367, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:07", "event_id": "8cf7e5a5-5e86-497d-9258-c15cb76ead26", "source_ip": "176.120.22.61", "source_port": 62480, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 23341, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:07", "event_id": "81050aa5-d0f5-4c06-a1fc-c979b7583a16", "source_ip": "176.120.22.61", "source_port": 62548, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 41433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:07", "event_id": "2dda33df-f9f1-44ac-bc3a-fab988fc6380", "source_ip": "176.120.22.61", "source_port": 63382, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 22433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "52b19e7e-1f86-4041-9350-a37a0ae11c28", "source_ip": "176.120.22.61", "source_port": 64142, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 14333, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "213cfbea-7316-4aa4-aeef-5f0378c2956c", "source_ip": "176.120.22.61", "source_port": 62716, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5000, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "fe883683-346a-48c6-a935-665ffcd67eb8", "source_ip": "176.120.22.61", "source_port": 62925, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8001, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "07614720-d010-4e35-9736-5e346e877e15", "source_ip": "176.120.22.61", "source_port": 63794, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "18b07496-00dc-4747-9963-dffb88040f50", "source_ip": "176.120.22.61", "source_port": 62137, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 21433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "3b4145f3-1713-452a-93ea-35c0d7f58e6c", "source_ip": "176.120.22.61", "source_port": 62667, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "7dd1db5b-5e31-46c9-8080-6c938edf2650", "source_ip": "176.120.22.61", "source_port": 65150, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1434, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "e312dfeb-2833-4aff-8de4-b0ab327246fb", "source_ip": "176.120.22.61", "source_port": 62551, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1444, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "053b180d-fa3d-49d7-9e84-1f205478b320", "source_ip": "176.120.22.61", "source_port": 62911, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1455, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "95f40063-9ffd-4b43-b6ff-f6dc124e3c28", "source_ip": "176.120.22.61", "source_port": 63719, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "3cee93b9-5fcc-4491-8078-d3988e2af46e", "source_ip": "176.120.22.61", "source_port": 62423, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9001, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "240e84a0-7178-4dba-9926-3fc30052e364", "source_ip": "176.120.22.61", "source_port": 64960, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1488, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "42f5be74-b078-43c7-8bd4-b8302f22ea89", "source_ip": "176.120.22.61", "source_port": 64750, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4171, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-27T16:54:06", "event_id": "315285bd-0540-4403-a526-006fc1d1be5e", "source_ip": "176.120.22.61", "source_port": 62870, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 14433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\ufffd\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-28T22:31:54", "event_id": "539b50fc-7c89-4625-99c9-35096fd01df4", "source_ip": "176.120.22.43", "source_port": 59620, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3a89a0cfb584ed7681562dc7c9fec664", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""}
+{"timestamp": "2026-08-28T19:10:21", "event_id": "0239d33d-1344-45e8-9c60-ffda3b6f8484", "source_ip": "193.143.1.66", "source_port": 31464, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:10:21", "event_id": "517a4300-7b76-4581-908e-da755838f81a", "source_ip": "193.143.1.66", "source_port": 30528, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:10:21", "event_id": "d5159e18-5898-4529-b6d5-99715838688f", "source_ip": "193.143.1.66", "source_port": 29226, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:10:21", "event_id": "aa1d2902-0fbf-4cb5-b715-a1f531982061", "source_ip": "193.143.1.66", "source_port": 31414, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:10:21", "event_id": "1574c814-c7f9-4e8d-8062-04578aed52f7", "source_ip": "193.143.1.66", "source_port": 30337, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:10:20", "event_id": "a8b066ec-b471-4012-b41a-c4c9b26984e0", "source_ip": "193.143.1.66", "source_port": 29224, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:09:31", "event_id": "ba3c7b04-728d-424d-8bf3-e95b728a7b9a", "source_ip": "193.143.1.66", "source_port": 18675, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:09:31", "event_id": "a992aadb-4528-4896-9823-6044761d546a", "source_ip": "193.143.1.66", "source_port": 18106, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T19:09:31", "event_id": "2ed6d639-0c95-423d-a236-f0784392d4c1", "source_ip": "193.143.1.66", "source_port": 15385, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:47:34", "event_id": "1f44a320-30bb-4155-bb3b-529ee88aabf8", "source_ip": "193.143.1.66", "source_port": 43008, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:47:34", "event_id": "1a12cb7a-7eac-4124-817b-ff3b3f029b25", "source_ip": "193.143.1.66", "source_port": 42863, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:47:33", "event_id": "f46ec8a2-f6d1-4273-978d-699709b220f9", "source_ip": "193.143.1.66", "source_port": 41630, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:47:33", "event_id": "2dbd567e-2a52-4de2-ac52-0f21b10866c4", "source_ip": "193.143.1.66", "source_port": 40655, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3397, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:47:33", "event_id": "7d92b520-9d52-40b4-a61c-c746b640a35e", "source_ip": "193.143.1.66", "source_port": 41617, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:47:33", "event_id": "8b9d50de-43ed-4532-ba96-0ff77d9abc82", "source_ip": "193.143.1.66", "source_port": 40650, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3394, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:46:51", "event_id": "34d71652-b3eb-4ba6-9b57-824c5a44386f", "source_ip": "193.143.1.66", "source_port": 39282, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:46:51", "event_id": "c7731289-e171-452a-8521-4a2685afd9fd", "source_ip": "193.143.1.66", "source_port": 38835, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T09:46:51", "event_id": "f3acb1a4-5a4d-449e-a29b-658d099d1a69", "source_ip": "193.143.1.66", "source_port": 34679, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "Moscow", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3390, "network_protocol": "", "application_protocol": "rdp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 44, "dest_bytes": 12, "network_bytes": 56, "event_summary": "\u0003\u0000\u0000,'\ufffd\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Domain\r\n\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"}
+{"timestamp": "2026-08-28T07:59:56", "event_id": "0597b410-526c-4c7d-af47-e773ff275c54", "source_ip": "176.120.22.61", "source_port": 41428, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 23341, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 26, "dest_bytes": 13, "network_bytes": 39, "event_summary": "\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001\ufffd\u000f\u0000\u0007\ufffd\u0000\u0000\u0002"}
+{"timestamp": "2026-08-29T19:33:51", "event_id": "89946316-cb27-416c-b8af-876f4671988c", "source_ip": "176.120.22.43", "source_port": 64537, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "5a6ae6288fbcfde4161d1687a4fc3513", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 263, "dest_bytes": 78, "network_bytes": 341, "event_summary": ""}
+{"timestamp": "2026-08-29T16:47:48", "event_id": "af9237dd-1a57-4088-9bf4-7cca3010aece", "source_ip": "176.120.22.43", "source_port": 50504, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "b46e867d24b4e8f6cba4c62bca323c64", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 265, "dest_bytes": 78, "network_bytes": 343, "event_summary": ""}
+{"timestamp": "2026-08-29T16:44:51", "event_id": "4de75088-2a22-4a74-8736-2c40edd3a5db", "source_ip": "176.120.22.43", "source_port": 60143, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "10059e06caa2f42edba8a70ddaa0349c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""}
+{"timestamp": "2026-08-29T16:25:54", "event_id": "d746b530-9b31-4df4-93e6-041bfbbd1bff", "source_ip": "176.120.22.43", "source_port": 63357, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4433, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4433\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "6683e5cb0948aae53914e2ea9d0af75e", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T15:40:52", "event_id": "4ee697fe-ec5d-455a-b253-3d2eb8cac2d8", "source_ip": "176.120.22.43", "source_port": 61115, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4439, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4439\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "d0129b32c9047e7ad3246f7920eb5971", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T15:37:05", "event_id": "c2801ce9-6605-4a8a-80b6-037c56999047", "source_ip": "176.120.22.43", "source_port": 51422, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3044f8c83ee39bd394e020b929730509", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 259, "dest_bytes": 78, "network_bytes": 337, "event_summary": ""}
+{"timestamp": "2026-08-29T15:27:31", "event_id": "23cfec6a-d08b-4539-b9d6-4678b6911814", "source_ip": "176.120.22.43", "source_port": 57321, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:2443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "7b0a3955854b645bd5b8b30eff9d3762", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T15:24:36", "event_id": "f9c68396-2473-4312-929d-9f0683643ee3", "source_ip": "176.120.22.43", "source_port": 54280, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:5443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "a393c3afe0dbf89c403ea58f815aee7a", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T15:21:23", "event_id": "435976fd-d30f-4e1c-85d9-32974a14e1fd", "source_ip": "176.120.22.43", "source_port": 51118, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4432, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4432\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "dbb41f7d149a32718210a3b6122b79bf", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T15:21:11", "event_id": "fb71a9c0-7a5d-4d84-91a3-daf3bf5d75cf", "source_ip": "176.120.22.43", "source_port": 58255, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "0a0909629ab2b016a0daa8e75cdc86fa", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T14:43:13", "event_id": "c421365e-4ea0-4c81-b5ac-dbeb2e156fc5", "source_ip": "176.120.22.43", "source_port": 54459, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "2f7bb26f5917a619b12f4f54312d9cf3", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T13:41:39", "event_id": "576e7408-4b1d-48de-af91-7bb01c6965ad", "source_ip": "176.120.22.43", "source_port": 60218, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:3443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "f633450e45aa2b2017bc60428e9686f8", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T13:39:50", "event_id": "fb7c534f-dea9-4994-9260-a7324853e537", "source_ip": "176.120.22.43", "source_port": 60919, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:9443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "b6072ffb73369edecc41fd2ca920adcb", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T13:26:00", "event_id": "43c89ca9-3d6c-49c7-b7a9-6e7d8999481b", "source_ip": "176.120.22.43", "source_port": 62803, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "660176adc5f2a0d6cbcf794a2989076b", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T12:50:17", "event_id": "c8468f91-bef5-4ee4-8e78-3effba01b0cd", "source_ip": "176.120.22.43", "source_port": 50152, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4434, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4434\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "c4a2ef792fca6616eceb254f4143570f", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T12:15:39", "event_id": "c0ea2ad4-feec-45e2-8ef6-ba84f9a48da1", "source_ip": "176.120.22.43", "source_port": 62142, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4436, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4436\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3f8ae5c25f23e67cb36ab5c6157ea5b5", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T12:07:32", "event_id": "4115346b-687e-4aae-b6a1-4831aae26a71", "source_ip": "176.120.22.43", "source_port": 59175, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "47456f8a08540c328fc4a903c6faa47d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 265, "dest_bytes": 78, "network_bytes": 343, "event_summary": ""}
+{"timestamp": "2026-08-29T12:03:27", "event_id": "fc112721-7cc5-48a1-aac8-3ded9d745729", "source_ip": "176.120.22.43", "source_port": 49328, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4433, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:4433\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "bbf846d7f7301f733c16d281b2a197b8", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T11:34:54", "event_id": "da41e17c-0dcd-49e3-a057-9e53cdeba2d2", "source_ip": "176.120.22.43", "source_port": 60427, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:2443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "3f0db94e0d38e24d532ea0b9b983b088", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-29T11:14:43", "event_id": "704eb47a-6377-4ded-a7d5-17a95063281a", "source_ip": "176.120.22.43", "source_port": 52876, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5443, "network_protocol": "tls", "application_protocol": "http", "http_method": "POST", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"20\",\"host\":\"<HONEYPOT>:5443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "0ab9169a5aae946a2b9a23a0119c4b48", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "po11nn0500_63d29dec8e1d", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 264, "dest_bytes": 78, "network_bytes": 342, "event_summary": ""}
+{"timestamp": "2026-08-30T14:00:29", "event_id": "f7c53913-ea89-45be-b603-feb65fdc3d95", "source_ip": "176.120.22.43", "source_port": 54293, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:10443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "7b431b0653be3522b70b57c06ccaf70d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 269, "dest_bytes": 78, "network_bytes": 347, "event_summary": ""}
+{"timestamp": "2026-08-30T13:57:28", "event_id": "f09a2a47-1f61-44b2-91c2-c7aea8a84a58", "source_ip": "176.120.22.43", "source_port": 62390, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "31b02e25c5273efb339e7bba65a69f9d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 263, "dest_bytes": 78, "network_bytes": 341, "event_summary": ""}
+{"timestamp": "2026-08-30T13:38:18", "event_id": "87beb273-335e-4886-af60-0f9a22593bed", "source_ip": "176.120.22.43", "source_port": 56251, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4433, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4433\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "1d70b097372d37b920ba597018b06f4c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T12:52:56", "event_id": "caebb65e-9d19-41f4-84b0-684b54be187a", "source_ip": "176.120.22.43", "source_port": 64571, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4439, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4439\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "4282b62271907c1a2d23bd1c4db40920", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T12:49:07", "event_id": "eaa1de84-b4a3-448c-9af9-9b4132693d2f", "source_ip": "176.120.22.43", "source_port": 52938, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "e445ba4c8424263d85c394c77cae613c", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 263, "dest_bytes": 78, "network_bytes": 341, "event_summary": ""}
+{"timestamp": "2026-08-30T12:39:21", "event_id": "5514a617-9ca7-41ed-ba92-036178abefe1", "source_ip": "176.120.22.43", "source_port": 53898, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:2443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "49db6577b76dbcc13126269051d44469", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T12:36:26", "event_id": "0ba5fffc-a290-4a3b-8900-11a38553aaa0", "source_ip": "176.120.22.43", "source_port": 65131, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:5443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "47e700b062aeb7ebd36f42e8ed020fec", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T12:33:09", "event_id": "8deb9aa9-f8d9-445a-90cc-54abbc37dca6", "source_ip": "176.120.22.43", "source_port": 59695, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4432, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4432\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "1d38eae37e77650d3c32f219f212b61d", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T12:33:01", "event_id": "46685f5e-560a-48af-b978-608ad97c1d80", "source_ip": "176.120.22.43", "source_port": 50736, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "38a95ee00d2b9695cdb13f233d975c33", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T11:54:55", "event_id": "2b9273cc-39d3-488f-9e41-7469116bc06c", "source_ip": "176.120.22.43", "source_port": 59785, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4435, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4435\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "b1afa34213cb9129efab621e53280356", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T10:53:13", "event_id": "38e74a50-d7bc-47b5-abf1-f892fb55ae4e", "source_ip": "176.120.22.43", "source_port": 52069, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 3443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:3443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "312a74dbd08a7366e69a0ca374423af9", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T10:51:22", "event_id": "67ed105e-15a2-4454-b5a1-ca7f9241b961", "source_ip": "176.120.22.43", "source_port": 52309, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:9443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "2ef83d2c668e22507a03840c431b0b64", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T10:37:28", "event_id": "69050b60-9f73-46f7-b6f4-0ad034aa425a", "source_ip": "176.120.22.43", "source_port": 63099, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4443, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "7bf4d7c6246e624b57d2dcc649188cd3", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T10:01:25", "event_id": "983197af-d073-412b-a585-c111bf1047c7", "source_ip": "176.120.22.43", "source_port": 58545, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 4434, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-GB,en;q=0.9,en-US;q=0.8\",\"host\":\"<HONEYPOT>:4434\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1010h1_61a7ad8aa9b6_3a8073edd8ef", "tls_client_ja3": "1a4a9c829647c94dfa19e8c87694b341", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_CHACHA20_POLY1305_SHA256", "http_request_ja4h": "ge11nn05en_3bd45b6f184e", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 268, "dest_bytes": 78, "network_bytes": 346, "event_summary": ""}
+{"timestamp": "2026-08-30T09:31:13", "event_id": "f6d8d5b8-2bba-40f0-b6f6-ec2dacb486ae", "source_ip": "176.120.22.61", "source_port": 2104, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9999, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"}
+{"timestamp": "2026-08-30T09:31:13", "event_id": "1d6be3bf-e484-4d11-b184-5ace56aabc1e", "source_ip": "176.120.22.61", "source_port": 2085, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9433, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"}
+{"timestamp": "2026-08-30T09:31:13", "event_id": "6b9da5aa-85e9-467d-bb29-6d8109146813", "source_ip": "176.120.22.61", "source_port": 2072, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 9001, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"}
+{"timestamp": "2026-08-30T09:31:13", "event_id": "85c9cf05-c890-476f-8cad-d29d983e118f", "source_ip": "176.120.22.61", "source_port": 2069, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8989, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"}
+{"timestamp": "2026-08-30T09:31:13", "event_id": "d6fe786d-a8c1-4d07-b0f6-8c2b128585a4", "source_ip": "176.120.22.61", "source_port": 2047, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8899, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"}
+{"timestamp": "2026-08-30T09:31:13", "event_id": "54246c34-207a-42d0-9432-bd4db6e8fe07", "source_ip": "176.120.22.61", "source_port": 2036, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8433, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 13, "network_bytes": 169, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0001detector\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000pptp-check\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"}
+{"timestamp": "2026-08-31T09:44:38", "event_id": "86994bef-e65b-4c9d-8337-aa2cfc41351d", "source_ip": "176.120.22.61", "source_port": 63649, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 2433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:38", "event_id": "fdfd7923-2ad3-4d6a-8efe-e7b4f14a4bde", "source_ip": "176.120.22.61", "source_port": 62335, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 14433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:38", "event_id": "4260594a-7612-45c4-9568-46f76500ebda", "source_ip": "176.120.22.61", "source_port": 63185, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 37628, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:37", "event_id": "d9cf3028-c927-4ba9-a088-9b39ad9bd0e6", "source_ip": "176.120.22.61", "source_port": 63441, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 5433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:37", "event_id": "4208a628-3d25-4a82-964b-2a543b4f15b0", "source_ip": "176.120.22.61", "source_port": 63224, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 10443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:37", "event_id": "6e73573f-a846-4d3e-b9a1-1d0fdecb68c6", "source_ip": "176.120.22.61", "source_port": 62307, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8899, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:37", "event_id": "ba5c1731-b5f0-4f9c-b8b0-9984c0074791", "source_ip": "176.120.22.61", "source_port": 63745, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 55366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:37", "event_id": "45efda38-0458-4145-9023-ffdef8884fed", "source_ip": "176.120.22.61", "source_port": 62489, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 16433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:37", "event_id": "8662493f-0a6c-40f4-b7c0-a799880eeddb", "source_ip": "176.120.22.61", "source_port": 65473, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 51234, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:37", "event_id": "04824e9f-2d7a-430e-9d6b-d3e56f8ffd94", "source_ip": "176.120.22.61", "source_port": 63895, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 1501, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "8a67ad3d-e25c-43fc-b0cc-f16f2e6c5a01", "source_ip": "176.120.22.61", "source_port": 63642, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 7366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "f8cbc6e5-bfce-49f0-802c-73c03bf7fa2f", "source_ip": "176.120.22.61", "source_port": 63777, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 8001, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "fe5f4b04-8886-4d4e-b78f-fb1e46c6bc9e", "source_ip": "176.120.22.61", "source_port": 63833, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 61433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "a90d5ebb-a492-450b-b8dd-a51ff9d1b1bb", "source_ip": "176.120.22.61", "source_port": 62312, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 11443, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "2b90cb66-b34f-4439-90c1-8122216b3a2e", "source_ip": "176.120.22.61", "source_port": 64064, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "986c34e2-fc73-479d-ab26-ed39f3b93a9d", "source_ip": "176.120.22.61", "source_port": 64590, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6802, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "bb880e9d-01c4-48a3-b7c5-c54690fd6b84", "source_ip": "176.120.22.61", "source_port": 64290, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 25366, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "df97152d-6f04-4d9c-85ca-cb852feaca40", "source_ip": "176.120.22.61", "source_port": 62479, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 6602, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "2af57e95-bb61-4f55-a7f2-24a2d7f7a08e", "source_ip": "176.120.22.61", "source_port": 64589, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 19433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}
+{"timestamp": "2026-08-31T09:44:36", "event_id": "6ee75613-5e61-44e2-9356-87c2d7af9a19", "source_ip": "176.120.22.61", "source_port": 62171, "source_domain": "", "country_code": "RU", "country_name": "Russia", "city_name": "", "asn_number": 198953, "asn_org": "Proton66 OOO", "dest_port": 27433, "network_protocol": "", "application_protocol": "mssql-tds", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 94, "dest_bytes": 13, "network_bytes": 107, "event_summary": "\u0012\u0001\u0000^\u0000\u0000\u0001\u0000\u0000\u0000$\u0000\u0006\u0001\u0000*\u0000\u0001\u0002\u0000+\u0000\u0001\u0003\u0000,\u0000\u0004\u0004\u00000\u0000\u0001\u0005\u00001\u0000$\u0006\u0000U\u0000\u0001\ufffd\u0004\u0007\f\ufffd\u0000\u0000\u0000\u0000\u0000\u0000\u0015\ufffd\u0000\ufffd\ufffd\u0007\ufffd\ufffd\u0000\u0000\u0000\ufffdq>\ufffd\ufffd\u007f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\ufffd\ufffd\ufffd\u0001"}