From b6f4f2af55e81a459cb126da5ef972b9305cf67d Mon Sep 17 00:00:00 2001 From: hrbrmstr Date: Mon, 24 Aug 2026 00:26:19 -0400 Subject: add: bph report iocs and daily drop helper --- kevlar/2026-08-23/honeylabs/events-AS198953.json | 1 + 1 file changed, 1 insertion(+) create mode 100644 kevlar/2026-08-23/honeylabs/events-AS198953.json (limited to 'kevlar/2026-08-23/honeylabs/events-AS198953.json') diff --git a/kevlar/2026-08-23/honeylabs/events-AS198953.json b/kevlar/2026-08-23/honeylabs/events-AS198953.json new file mode 100644 index 0000000..a6d09a2 --- /dev/null +++ b/kevlar/2026-08-23/honeylabs/events-AS198953.json @@ -0,0 +1 @@ +[{"timestamp":"2026-08-23T11:50:02","event_id":"458d6c15-98d4-481f-a3b1-0057a0601e85","source_ip":"176.120.22.240","source_port":35109,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":52344,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":52344\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":674000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-23T11:50:01","event_id":"458d6c15-98d4-481f-a3b1-0057a0601e85","source_ip":"176.120.22.240","source_port":35109,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":52344,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":52344\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":231000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-23T11:47:28","event_id":"5a96700b-3b22-488f-b743-1629e93797dd","source_ip":"176.120.22.240","source_port":8590,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":47459,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":47459\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":471000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-23T11:47:28","event_id":"5a96700b-3b22-488f-b743-1629e93797dd","source_ip":"176.120.22.240","source_port":8590,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":47459,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":47459\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":289000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-23T11:21:07","event_id":"328d4dbb-51f8-4a7c-8a54-af181b1bf849","source_ip":"176.120.22.240","source_port":48613,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":47050,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":47050\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":250000000,"source_bytes":89,"dest_bytes":79,"network_bytes":168,"event_summary":""},{"timestamp":"2026-08-23T11:21:07","event_id":"9c91f9ca-10fc-4193-b691-5278fc12c96c","source_ip":"176.120.22.240","source_port":55273,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":47050,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":47050\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":1490000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-23T10:44:42","event_id":"417ba768-f823-4ed7-97dd-5e28902a4961","source_ip":"176.120.22.240","source_port":41498,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":13990,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":13990\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":733000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-23T10:44:42","event_id":"417ba768-f823-4ed7-97dd-5e28902a4961","source_ip":"176.120.22.240","source_port":41498,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":13990,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":13990\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":428000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-23T09:07:49","event_id":"6709282b-8600-43d8-9e79-640d1016f336","source_ip":"176.120.22.240","source_port":49522,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":46417,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":46417\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":581000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-23T09:07:49","event_id":"6709282b-8600-43d8-9e79-640d1016f336","source_ip":"176.120.22.240","source_port":49522,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":46417,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":46417\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":252000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-23T03:02:04","event_id":"c26c700d-62ef-49c7-b8c8-7a426d8c20ab","source_ip":"176.120.22.240","source_port":22338,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":43615,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":43615\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":432000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-23T03:02:04","event_id":"c26c700d-62ef-49c7-b8c8-7a426d8c20ab","source_ip":"176.120.22.240","source_port":22338,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":43615,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":43615\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":263000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-23T01:26:20","event_id":"9347e640-f989-40be-88ca-28926f21b97a","source_ip":"176.120.22.240","source_port":13270,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":50468,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":50468\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":422000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-23T01:26:20","event_id":"9347e640-f989-40be-88ca-28926f21b97a","source_ip":"176.120.22.240","source_port":13270,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":50468,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":50468\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":203000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-23T01:18:48","event_id":"6a1611ac-5e73-4b12-9bf8-f38277d1fad8","source_ip":"176.120.22.240","source_port":49189,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":11110,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":11110\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":440000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-23T01:18:48","event_id":"6a1611ac-5e73-4b12-9bf8-f38277d1fad8","source_ip":"176.120.22.240","source_port":49189,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":11110,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":11110\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":213000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T19:36:53","event_id":"254980f3-6993-42e9-b506-c32047fd9035","source_ip":"176.120.22.240","source_port":13440,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":15941,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":15941\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":400000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T15:17:51","event_id":"553535e1-10a7-4f1c-afa2-be20e676c32c","source_ip":"176.120.22.240","source_port":17478,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":52708,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":52708\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":360000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T15:17:51","event_id":"553535e1-10a7-4f1c-afa2-be20e676c32c","source_ip":"176.120.22.240","source_port":17478,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":52708,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":52708\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":188000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T14:44:44","event_id":"744bffeb-928a-4ea1-abc9-d34663b0e37b","source_ip":"176.120.22.240","source_port":25177,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":59545,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":59545\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":464000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T14:44:44","event_id":"744bffeb-928a-4ea1-abc9-d34663b0e37b","source_ip":"176.120.22.240","source_port":25177,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":59545,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":59545\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":222000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T11:39:30","event_id":"7a33fcd3-10d7-45f3-9c1f-1aa047f2f9dc","source_ip":"176.120.22.240","source_port":60167,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":46534,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":46534\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":390000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T11:39:30","event_id":"7a33fcd3-10d7-45f3-9c1f-1aa047f2f9dc","source_ip":"176.120.22.240","source_port":60167,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":46534,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":46534\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":193000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T11:08:54","event_id":"38339988-6bf1-4bc5-8f06-e6ed1771252b","source_ip":"176.120.22.240","source_port":60845,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":42499,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":42499\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":458000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T11:08:53","event_id":"38339988-6bf1-4bc5-8f06-e6ed1771252b","source_ip":"176.120.22.240","source_port":60845,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":42499,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":42499\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":221000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T06:52:11","event_id":"113fffe8-0d0c-48d2-9f1f-29550eebbb07","source_ip":"176.120.22.240","source_port":32205,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":43924,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":43924\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":422000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T06:52:10","event_id":"113fffe8-0d0c-48d2-9f1f-29550eebbb07","source_ip":"176.120.22.240","source_port":32205,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":43924,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":43924\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":216000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T03:28:08","event_id":"bc480d97-6b86-4a5f-ab58-9685a6f2572d","source_ip":"176.120.22.240","source_port":9741,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":40291,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":40291\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":361000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T03:28:08","event_id":"bc480d97-6b86-4a5f-ab58-9685a6f2572d","source_ip":"176.120.22.240","source_port":9741,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":40291,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":40291\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":166000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T02:08:38","event_id":"d83efe43-305a-4918-8c07-01eed3ccccad","source_ip":"176.120.22.240","source_port":14449,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":38667,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":38667\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":362000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T02:08:37","event_id":"d83efe43-305a-4918-8c07-01eed3ccccad","source_ip":"176.120.22.240","source_port":14449,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":38667,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":38667\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":162000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-22T00:24:48","event_id":"7aeadc37-abc3-4d6b-ba67-c159e9259afb","source_ip":"176.120.22.240","source_port":16312,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":14632,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"host\":\":14632\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0200_549fad093d6b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":354000000,"source_bytes":202,"dest_bytes":158,"network_bytes":360,"event_summary":""},{"timestamp":"2026-08-22T00:24:47","event_id":"7aeadc37-abc3-4d6b-ba67-c159e9259afb","source_ip":"176.120.22.240","source_port":16312,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":14632,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"","url_path":"/remote/login?lang=en","url_domain":"","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"Keep-Alive\",\"host\":\":14632\"}","ssh_client_hassh":"","tls_client_ja4":"t12i210600_76e208dd3e22_f28add8e7af0","tls_client_ja3":"c12f54a3f91dc7bafd92cb59fe009a35","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"ge11nn0300_80168362a4ec","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":163000000,"source_bytes":113,"dest_bytes":79,"network_bytes":192,"event_summary":""},{"timestamp":"2026-08-21T09:03:29","event_id":"cdea3a25-ad9d-4a06-bc95-dff35b2f0e4c","source_ip":"176.120.22.61","source_port":9219,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":31433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:27","event_id":"7315cd99-a678-4392-8019-daec87108cb6","source_ip":"176.120.22.61","source_port":30656,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":2008,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:27","event_id":"b7b1e2bc-2d74-4524-b4d5-5c2225ef3eaf","source_ip":"176.120.22.61","source_port":28921,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1666,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:27","event_id":"38e3ffd9-da11-47a3-bef3-13ff67296293","source_ip":"176.120.22.61","source_port":26115,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":61433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:26","event_id":"c15e99c1-3bdf-4216-ae18-f0e2f60214f8","source_ip":"176.120.22.61","source_port":8925,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":45366,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:26","event_id":"4b67fa2b-8260-49ae-a201-8042c4fe9187","source_ip":"176.120.22.61","source_port":7866,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":12433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:25","event_id":"752d64fb-d660-4bfc-b163-f9aa917bc56e","source_ip":"176.120.22.61","source_port":58600,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":41433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:25","event_id":"8efc3067-7767-452a-a4f5-eedd51abe819","source_ip":"176.120.22.61","source_port":54556,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1456,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:25","event_id":"9ba75ba1-6556-439b-bc2d-7f5d86d9fc67","source_ip":"176.120.22.61","source_port":49507,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1435,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:25","event_id":"e4a00bd9-24b3-4591-9390-8f3cbeb1f90b","source_ip":"176.120.22.61","source_port":49264,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":2022,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:25","event_id":"71d6484c-ece6-47cd-b9d7-8d9338d71ce8","source_ip":"176.120.22.61","source_port":47205,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":6240,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:24","event_id":"65daea86-30cc-4ae5-9390-a748d97683c3","source_ip":"176.120.22.61","source_port":26941,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5366,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:23","event_id":"85467ab8-af2a-462c-a983-e8925ba3abdf","source_ip":"176.120.22.61","source_port":18595,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":20433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:23","event_id":"c36dfb34-67e3-4327-9b1d-15c4f8cfdd59","source_ip":"176.120.22.61","source_port":6167,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":30001,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:22","event_id":"5002f6e5-b2a6-4aab-a6fe-9cff9a43d70b","source_ip":"176.120.22.61","source_port":4279,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1439,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:22","event_id":"369167d0-56a2-442c-8f08-6dac1151fba7","source_ip":"176.120.22.61","source_port":51590,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":6602,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:22","event_id":"215a39d5-8462-45b0-b856-169daeb4e50d","source_ip":"176.120.22.61","source_port":48363,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":2468,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:21","event_id":"0a691aec-51da-44dd-9475-78d6d5174021","source_ip":"176.120.22.61","source_port":38596,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5555,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:21","event_id":"df630e0f-a22b-4f87-8d78-5b76fd8eaa24","source_ip":"176.120.22.61","source_port":36355,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1436,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:21","event_id":"117b11ce-acb0-47ec-b5aa-cf76f4463177","source_ip":"176.120.22.61","source_port":33342,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":55366,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:21","event_id":"6f5967e2-a2f2-45dc-a68e-b42b625523fa","source_ip":"176.120.22.61","source_port":24074,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":6666,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:20","event_id":"64447956-b0a0-46cc-85dc-ebc7cd024f91","source_ip":"176.120.22.61","source_port":13241,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1533,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:19","event_id":"b882069a-58d6-48b0-8cf3-25e46fc02bb3","source_ip":"176.120.22.61","source_port":56300,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":4171,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:19","event_id":"0499f16f-90f9-4f87-8f39-3c3a3057111c","source_ip":"176.120.22.61","source_port":49623,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":4000,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:19","event_id":"ca72da2a-43b7-44ed-8237-e85d60688959","source_ip":"176.120.22.61","source_port":46814,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:19","event_id":"43f90dc4-202e-4972-b656-eea64637dd51","source_ip":"176.120.22.61","source_port":45960,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":19433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:19","event_id":"30e32391-ab72-4f48-8f66-a358454d3e22","source_ip":"176.120.22.61","source_port":41729,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5001,"network_protocol":"","application_protocol":"targusdataspeed","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:18","event_id":"797c7225-4992-4576-8ce9-384f1c099fca","source_ip":"176.120.22.61","source_port":27907,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1588,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:16","event_id":"977e072f-b232-428c-b195-9526c6c5f46e","source_ip":"176.120.22.61","source_port":43508,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1488,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:16","event_id":"436d8652-8c92-485e-a12a-cf83f0bfd668","source_ip":"176.120.22.61","source_port":32994,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":3333,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:15","event_id":"06420c62-94a7-4bff-afd4-f2157d092d7c","source_ip":"176.120.22.61","source_port":12957,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":14331,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:14","event_id":"336dcbef-ae27-434f-abad-05e21d7d104d","source_ip":"176.120.22.61","source_port":6119,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":11433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:14","event_id":"1cb3a9bc-04d6-41cf-85c3-790cfb0d7cd0","source_ip":"176.120.22.61","source_port":5299,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5005,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:14","event_id":"73747323-9999-4cf0-8824-e975d9ac7dc6","source_ip":"176.120.22.61","source_port":52102,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":3433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:14","event_id":"66c4a000-252d-4b5f-873d-feaec445defe","source_ip":"176.120.22.61","source_port":49328,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":9527,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:13","event_id":"fc42ca9e-26b8-4cb8-b59f-0ac34cd669f0","source_ip":"176.120.22.61","source_port":38828,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":33000,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:12","event_id":"21101a1e-a120-4f61-bcbb-63126a3e6efe","source_ip":"176.120.22.61","source_port":12622,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":9000,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:11","event_id":"1b8c2f02-b71c-4bfc-9a6a-076ec3a9c4cc","source_ip":"176.120.22.61","source_port":56301,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":12345,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:10","event_id":"38af1722-b83c-4b42-a30b-e259af6a2ea0","source_ip":"176.120.22.61","source_port":36776,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":14444,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:10","event_id":"04d0a43e-10fb-4664-b778-9f43ff1c3938","source_ip":"176.120.22.61","source_port":36283,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":21433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:10","event_id":"4b89c2eb-4087-42fe-8af8-24af46c9883e","source_ip":"176.120.22.61","source_port":33545,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":6688,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:10","event_id":"732be308-6be8-4ca6-84d8-3bc054e8dbb6","source_ip":"176.120.22.61","source_port":31712,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":43399,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:08","event_id":"fb7b8b8a-97c0-4274-b851-3b95d806adee","source_ip":"176.120.22.61","source_port":48145,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":8829,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:07","event_id":"a2d5bff4-1116-4077-a1fa-9168e618b74f","source_ip":"176.120.22.61","source_port":26918,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1443,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:06","event_id":"977e8189-a65d-40eb-a681-7c7c4fff33d8","source_ip":"176.120.22.61","source_port":57904,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5539,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:05","event_id":"d293d40b-3f02-4d7d-94bb-a3bf7e031a02","source_ip":"176.120.22.61","source_port":55140,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":8899,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:05","event_id":"53c9d886-6753-4432-8610-9b0be27e50d0","source_ip":"176.120.22.61","source_port":48491,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":3307,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:05","event_id":"2251f13d-db51-44b5-ba86-07f5e48f7591","source_ip":"176.120.22.61","source_port":47954,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1002,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:05","event_id":"c538c37b-9ce6-4d7e-982c-23e99c3185eb","source_ip":"176.120.22.61","source_port":40829,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5369,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:05","event_id":"651b8908-86b4-4052-9926-2d81081eef6f","source_ip":"176.120.22.61","source_port":40729,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1466,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:05","event_id":"58efbddf-1bbd-46de-93b4-e316e31c1813","source_ip":"176.120.22.61","source_port":39122,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":2866,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:05","event_id":"cbb12476-4756-43c6-8add-4005baeeb9a7","source_ip":"176.120.22.61","source_port":33956,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1982,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:04","event_id":"02afe537-6443-4149-befd-4d04fdd0fb4d","source_ip":"176.120.22.61","source_port":33293,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5899,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:04","event_id":"3c505386-1480-4006-9e8a-e048dbb3c6c0","source_ip":"176.120.22.61","source_port":28707,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":3316,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:04","event_id":"b93a08d2-2f5c-484a-910e-6fefef85d493","source_ip":"176.120.22.61","source_port":28761,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1438,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:04","event_id":"6229caf9-8e5d-4acb-a046-de96807e85c0","source_ip":"176.120.22.61","source_port":27731,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":4433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"a7c41581-f3fc-44fd-a6c9-a81e637b84b5","source_ip":"176.120.22.61","source_port":9270,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1444,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"d718b8e3-15a3-4d7e-8e1b-b0b95d2c3f89","source_ip":"176.120.22.61","source_port":7076,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":9999,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"4412824d-8bb6-47a8-a09a-3fb481eb2572","source_ip":"176.120.22.61","source_port":6323,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":6001,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"14c5c0e5-c403-4fa0-83b0-8d6d6d96efef","source_ip":"176.120.22.61","source_port":2723,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"7f98b2e4-2cff-415a-8529-b481bdab343b","source_ip":"176.120.22.61","source_port":1639,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":22222,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"37c55456-fb0e-4ace-8013-f614f4e7cf06","source_ip":"176.120.22.61","source_port":1057,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":6366,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"cd9be544-cfa1-45de-822f-d2b2bc378f03","source_ip":"176.120.22.61","source_port":57226,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":51433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"21e2c183-dea0-48db-8f1c-88b5f9d62b1b","source_ip":"176.120.22.61","source_port":56410,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1200,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"0a12c1c4-5e9c-405e-8df8-5fb900ab83e1","source_ip":"176.120.22.61","source_port":55684,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":5006,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"8cc16cd1-47c8-423d-840a-a5f7ef060ade","source_ip":"176.120.22.61","source_port":54712,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":1744,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"},{"timestamp":"2026-08-21T09:03:03","event_id":"4905b386-eec8-4139-b247-45f7aaad78e1","source_ip":"176.120.22.61","source_port":49384,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"","asn_number":198953,"asn_org":"Proton66 OOO","dest_port":8433,"network_protocol":"","application_protocol":"mssql-tds","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":26,"dest_bytes":13,"network_bytes":39,"event_summary":"\u0012\u0001\u0000\u001a\u0000\u0000\u0001\u0000\u0000\u0000\u000b\u0000\u0006\u0001\u0000\u0011\u0000\u0001�\u000f\u0000\u0007�\u0000\u0000\u0002"}] \ No newline at end of file -- cgit v1.2.3