{'ip': '45.142.193.159', 'asn': 214295, 'as_org': 'Skynet Network Ltd', 'latitude': 45.9968, 'continent_code': 'EU', 'country_name': 'Romania', 'country_code2': 'RO', 'country_code3': 'RO', 'timezone': 'Europe/Bucharest', 'location': {'lat': 45.9968, 'lon': 24.997}, 'longitude': 24.997}

srv


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}

{'tcp_flags_ts': '1b', 'fin': True, 'state': 'closed', 'syn': True, 'tcp_flags': '1b', 'tc_max_regions': 1, 'ts_max_regions': 1, 'ack': True, 'tcp_flags_tc': '1b', 'psh': True}


{'severity': 3, 'category': 'Generic Protocol Command Decode', 'action': 'allowed', 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'signature_id': 2101447, 'metadata': {'confidence': ['Medium'], 'created_at': ['2010_09_23'], 'updated_at': ['2024_03_08'], 'signature_severity': ['Informational']}, 'cve_id': 'CVE-2001-0540', 'gid': 1, 'rev': 15}

{'timezone': 'Asia/Shanghai', 'longitude': 118.0673, 'city_name': 'Xiamen', 'continent_code': 'AS', 'country_code2': 'CN', 'region_code': 'FJ', 'as_org': 'CHINA UNICOM China169 Backbone', 'location': {'lat': 24.4793, 'lon': 118.0673}, 'country_name': 'China', 'country_code3': 'CN', 'region_name': 'Fujian', 'ip': '58.23.212.245', 'latitude': 24.4793, 'asn': 4837}

{'x509_serials': ['0'], 'tx_id': 3, 'event_type': 'tls_handshake'}


{'latitude': 51.2993, 'timezone': 'Europe/Berlin', 'asn': 208191, 'country_code2': 'DE', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 9.491, 'lat': 51.2993}, 'continent_code': 'EU', 'as_org': 'Go Host Ltd', 'longitude': 9.491, 'ip': '176.65.134.6'}

cli


{'country_name': 'China', 'continent_code': 'AS', 'latitude': 34.7732, 'timezone': 'Asia/Shanghai', 'longitude': 113.722, 'country_code3': 'CN', 'as_org': 'Chinanet', 'asn': 4134, 'country_code2': 'CN', 'location': {'lat': 34.7732, 'lon': 113.722}, 'ip': '180.100.210.216'}

srv


{'country_name': 'United States', 'longitude': -97.822, 'country_code2': 'US', 'ip': '173.249.158.10', 'latitude': 37.751, 'asn': 36444, 'timezone': 'America/Chicago', 'as_org': 'NEXCESS-NET', 'country_code3': 'US', 'continent_code': 'NA', 'location': {'lon': -97.822, 'lat': 37.751}}

cli


{'continent_code': 'EU', 'country_code3': 'DE', 'location': {'lat': 51.2993, 'lon': 9.491}, 'country_name': 'Germany', 'timezone': 'Europe/Berlin', 'ip': '212.95.43.232', 'asn': 28753, 'latitude': 51.2993, 'as_org': 'Leaseweb Deutschland GmbH', 'longitude': 9.491, 'country_code2': 'DE'}

srv


{'latitude': 52.2986, 'country_code2': 'NL', 'longitude': 4.9728, 'timezone': 'Europe/Amsterdam', 'country_name': 'The Netherlands', 'as_org': 'NYBULA', 'continent_code': 'EU', 'asn': 401116, 'city_name': 'Amsterdam', 'country_code3': 'NL', 'region_code': 'NH', 'ip': '196.251.115.97', 'location': {'lat': 52.2986, 'lon': 4.9728}, 'postal_code': '1106', 'region_name': 'North Holland'}

{'fin': True, 'tcp_flags': '1f', 'ts_max_regions': 1, 'syn': True, 'tcp_flags_tc': '1f', 'tcp_flags_ts': '1b', 'state': 'closed', 'ack': True, 'tc_max_regions': 1, 'psh': True, 'rst': True}


{'city_name': 'Amsterdam', 'timezone': 'Europe/Amsterdam', 'region_name': 'North Holland', 'ip': '196.251.66.163', 'asn': 401116, 'longitude': 4.9728, 'postal_code': '1106', 'country_code2': 'NL', 'location': {'lon': 4.9728, 'lat': 52.2986}, 'latitude': 52.2986, 'country_name': 'The Netherlands', 'region_code': 'NH', 'as_org': 'NYBULA', 'country_code3': 'NL', 'continent_code': 'EU'}


{'location': {'lon': 4.9392, 'lat': 52.352}, 'postal_code': '1098', 'longitude': 4.9392, 'ip': '188.226.148.205', 'country_name': 'The Netherlands', 'country_code3': 'NL', 'country_code2': 'NL', 'region_code': 'NH', 'timezone': 'Europe/Amsterdam', 'latitude': 52.352, 'asn': 14061, 'continent_code': 'EU', 'as_org': 'DIGITALOCEAN-ASN', 'city_name': 'Amsterdam', 'region_name': 'North Holland'}

cli


{'action': 'allowed', 'gid': 1, 'category': 'Generic Protocol Command Decode', 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'signature_id': 2101447, 'cve_id': 'CVE-2001-0540', 'severity': 3, 'rev': 15, 'metadata': {'created_at': ['2010_09_23'], 'signature_severity': ['Informational'], 'confidence': ['Medium'], 'updated_at': ['2024_03_08']}}

{'location': {'lat': 50.1169, 'lon': 8.6837}, 'region_code': 'HE', 'longitude': 8.6837, 'as_org': 'Datacamp Limited', 'postal_code': '60313', 'latitude': 50.1169, 'timezone': 'Europe/Berlin', 'continent_code': 'EU', 'country_name': 'Germany', 'ip': '138.199.19.76', 'country_code2': 'DE', 'city_name': 'Frankfurt am Main', 'asn': 212238, 'country_code3': 'DE', 'region_name': 'Hesse'}


{'location': {'lat': 42.696, 'lon': 23.332}, 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG', 'ip': '79.124.62.122', 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'latitude': 42.696, 'longitude': 23.332, 'as_org': 'Dm Auto Eood'}

cli


{'metadata': {'created_at': ['2010_07_30'], 'confidence': ['High'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_07']}, 'signature_id': 2001329, 'action': 'allowed', 'gid': 1, 'signature': 'ET INFO RDP connection request', 'rev': 10, 'category': 'Misc activity', 'severity': 3}

{'continent_code': 'EU', 'location': {'lat': 50.1169, 'lon': 8.6837}, 'country_code2': 'DE', 'latitude': 50.1169, 'country_name': 'Germany', 'postal_code': '60313', 'country_code3': 'DE', 'ip': '138.199.19.76', 'region_name': 'Hesse', 'timezone': 'Europe/Berlin', 'asn': 212238, 'region_code': 'HE', 'as_org': 'Datacamp Limited', 'city_name': 'Frankfurt am Main', 'longitude': 8.6837}


srv


{'postal_code': '08223', 'as_org': 'Hetzner Online GmbH', 'country_code3': 'DE', 'latitude': 50.4777, 'asn': 24940, 'longitude': 12.3649, 'region_code': 'SN', 'continent_code': 'EU', 'timezone': 'Europe/Berlin', 'ip': '176.9.10.143', 'country_code2': 'DE', 'city_name': 'Falkenstein', 'location': {'lat': 50.4777, 'lon': 12.3649}, 'country_name': 'Germany', 'region_name': 'Saxony'}


{'country_name': 'Thailand', 'longitude': 100.4045, 'region_code': '12', 'country_code2': 'TH', 'ip': '61.91.163.146', 'postal_code': '11110', 'latitude': 13.9062, 'asn': 7470, 'timezone': 'Asia/Bangkok', 'city_name': 'Nonthaburi', 'region_name': 'Nonthaburi', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'continent_code': 'AS', 'location': {'lon': 100.4045, 'lat': 13.9062}}

srv


{'longitude': 126.978, 'as_org': 'UCLOUD INFORMATION TECHNOLOGY HK LIMITED', 'country_code3': 'KR', 'country_name': 'South Korea', 'city_name': 'Seoul', 'timezone': 'Asia/Seoul', 'latitude': 37.5658, 'asn': 135377, 'continent_code': 'AS', 'region_name': 'Seoul', 'location': {'lat': 37.5658, 'lon': 126.978}, 'postal_code': '04524', 'country_code2': 'KR', 'region_code': '11', 'ip': '101.36.114.222'}

{'length': 0, 'http_port': 3638, 'url': '/', 'protocol': 'HTTP/1.1', 'http_user_agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0', 'http_method': 'GET', 'hostname': '71.142.174.168'}


{'location': {'lon': -69.8965, 'lat': 18.4615}, 'latitude': 18.4615, 'longitude': -69.8965, 'region_code': '01', 'country_name': 'Dominican Republic', 'ip': '148.101.169.247', 'region_name': 'Nacional', 'timezone': 'America/Santo_Domingo', 'as_org': 'Compania Dominicana de Telefonos S. A.', 'postal_code': '10203', 'asn': 6400, 'city_name': 'Santo Domingo', 'country_code2': 'DO', 'continent_code': 'NA', 'country_code3': 'DO'}

cli


{'country_code3': 'CN', 'city_name': 'Xiamen', 'latitude': 24.4793, 'asn': 4837, 'timezone': 'Asia/Shanghai', 'longitude': 118.0673, 'as_org': 'CHINA UNICOM China169 Backbone', 'continent_code': 'AS', 'region_name': 'Fujian', 'ip': '58.23.144.125', 'country_code2': 'CN', 'region_code': 'FJ', 'country_name': 'China', 'location': {'lon': 118.0673, 'lat': 24.4793}}

cli


{'dma_code': 514, 'country_code2': 'US', 'latitude': 42.8864, 'timezone': 'America/New_York', 'country_name': 'United States', 'longitude': -78.8784, 'as_org': 'AS-COLOCROSSING', 'continent_code': 'NA', 'asn': 36352, 'city_name': 'Buffalo', 'country_code3': 'US', 'region_code': 'NY', 'ip': '23.94.26.34', 'location': {'lat': 42.8864, 'lon': -78.8784}, 'postal_code': '14205', 'region_name': 'New York'}

{'fin': True, 'tcp_flags': '1f', 'ts_max_regions': 1, 'syn': True, 'tcp_flags_tc': '12', 'tcp_flags_ts': '1f', 'state': 'close_wait', 'ack': True, 'tc_max_regions': 1, 'psh': True, 'rst': True}


{'location': {'lon': 75.8337, 'lat': 22.717}, 'postal_code': '452003', 'longitude': 75.8337, 'ip': '103.27.232.245', 'country_name': 'India', 'country_code3': 'IN', 'country_code2': 'IN', 'region_code': 'MP', 'timezone': 'Asia/Kolkata', 'latitude': 22.717, 'asn': 132779, 'continent_code': 'AS', 'as_org': 'RackBank Datacenters Private Ltd', 'city_name': 'Indore', 'region_name': 'Madhya Pradesh'}

srv


{'location': {'lat': 52.3824, 'lon': 4.8995}, 'longitude': 4.8995, 'as_org': 'Pfcloud UG', 'latitude': 52.3824, 'timezone': 'Europe/Amsterdam', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'ip': '45.156.87.14', 'country_code2': 'NL', 'asn': 51396, 'country_code3': 'NL'}

srv


{'location': {'lon': 4.8995, 'lat': 52.3824}, 'country_code3': 'NL', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'country_code2': 'NL', 'longitude': 4.8995, 'timezone': 'Europe/Amsterdam', 'as_org': '1337 Services GmbH', 'asn': 210558, 'ip': '192.159.99.162', 'latitude': 52.3824}

{'length': 0, 'protocol': 'HTTP/1.1', 'http_port': 3128, 'http_method': 'POST', 'hostname': '71.142.174.168', 'url': '/ws/v1/cluster/apps/new-application', 'http_user_agent': 'Go-http-client/1.1'}


{'metadata': {'created_at': ['2010_09_23'], 'confidence': ['Medium'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_08']}, 'cve_id': 'CVE-2001-0540', 'signature_id': 2101447, 'action': 'allowed', 'gid': 1, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'rev': 15, 'category': 'Generic Protocol Command Decode', 'severity': 3}


{'timezone': 'Europe/Bucharest', 'country_name': 'Romania', 'location': {'lat': 45.9968, 'lon': 24.997}, 'longitude': 24.997, 'ip': '45.142.193.169', 'latitude': 45.9968, 'as_org': 'Skynet Network Ltd', 'continent_code': 'EU', 'country_code3': 'RO', 'asn': 214295, 'country_code2': 'RO'}

srv


{'timezone': 'America/Los_Angeles', 'postal_code': '98160', 'longitude': -122.3303, 'city_name': 'Seattle', 'continent_code': 'NA', 'country_code2': 'US', 'region_code': 'WA', 'as_org': 'Datacamp Limited', 'location': {'lat': 47.6109, 'lon': -122.3303}, 'country_name': 'United States', 'country_code3': 'US', 'dma_code': 819, 'ip': '156.146.51.217', 'region_name': 'Washington', 'latitude': 47.6109, 'asn': 212238}


{'latitude': 51.2993, 'timezone': 'Europe/Berlin', 'asn': 208191, 'country_code2': 'DE', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 9.491, 'lat': 51.2993}, 'continent_code': 'EU', 'as_org': 'Go Host Ltd', 'longitude': 9.491, 'ip': '176.65.134.6'}

cli


{'severity': 3, 'signature_id': 2101447, 'metadata': {'signature_severity': ['Informational'], 'created_at': ['2010_09_23'], 'updated_at': ['2024_03_08'], 'confidence': ['Medium']}, 'category': 'Generic Protocol Command Decode', 'cve_id': 'CVE-2001-0540', 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'action': 'allowed', 'gid': 1, 'rev': 15}

{'country_code2': 'FI', 'timezone': 'Europe/Helsinki', 'location': {'lon': 24.9347, 'lat': 60.1719}, 'ip': '95.217.198.93', 'latitude': 60.1719, 'postal_code': '00191', 'asn': 24940, 'continent_code': 'EU', 'country_code3': 'FI', 'country_name': 'Finland', 'longitude': 24.9347, 'region_name': 'Uusimaa', 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'city_name': 'Helsinki'}


{'signature': 'GPL INFO MS Remote Desktop Request RDP', 'category': 'Generic Protocol Command Decode', 'gid': 1, 'signature_id': 2101447, 'rev': 15, 'metadata': {'confidence': ['Medium'], 'updated_at': ['2024_03_08'], 'signature_severity': ['Informational'], 'created_at': ['2010_09_23']}, 'cve_id': 'CVE-2001-0540', 'action': 'allowed', 'severity': 3}

{'country_name': 'China', 'continent_code': 'AS', 'latitude': 34.7732, 'timezone': 'Asia/Shanghai', 'longitude': 113.722, 'country_code3': 'CN', 'as_org': 'Chinanet', 'asn': 4134, 'country_code2': 'CN', 'location': {'lat': 34.7732, 'lon': 113.722}, 'ip': '180.100.210.216'}


{'postal_code': '86090', 'as_org': 'UNINET', 'country_code3': 'MX', 'latitude': 17.9776, 'asn': 8151, 'longitude': -92.9221, 'region_code': 'TAB', 'continent_code': 'NA', 'timezone': 'America/Mexico_City', 'ip': '189.230.100.92', 'country_code2': 'MX', 'city_name': 'Centro Municipality', 'location': {'lat': 17.9776, 'lon': -92.9221}, 'country_name': 'Mexico', 'region_name': 'Tabasco'}


{'rev': 15, 'action': 'allowed', 'gid': 1, 'category': 'Generic Protocol Command Decode', 'severity': 3, 'metadata': {'created_at': ['2010_09_23'], 'confidence': ['Medium'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_08']}, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'signature_id': 2101447, 'cve_id': 'CVE-2001-0540'}


{'state': 'closed', 'psh': True, 'tcp_flags_ts': '1b', 'tcp_flags_tc': '1b', 'ack': True, 'ts_max_regions': 1, 'tc_max_regions': 1, 'fin': True, 'tcp_flags': '1b', 'syn': True}


srv


{'country_code3': 'SG', 'city_name': 'Singapore', 'latitude': 1.314, 'postal_code': '62', 'timezone': 'Asia/Singapore', 'longitude': 103.6839, 'asn': 14061, 'as_org': 'DIGITALOCEAN-ASN', 'continent_code': 'AS', 'ip': '167.71.195.206', 'country_code2': 'SG', 'country_name': 'Singapore', 'location': {'lon': 103.6839, 'lat': 1.314}}

{'psh': True, 'ack': True, 'syn': True, 'state': 'closed', 'fin': True, 'tcp_flags_ts': '1b', 'ts_max_regions': 1, 'tcp_flags': '1b', 'tcp_flags_tc': '1b', 'tc_max_regions': 1}


{'continent_code': 'EU', 'country_code3': 'DE', 'location': {'lat': 51.2993, 'lon': 9.491}, 'country_name': 'Germany', 'timezone': 'Europe/Berlin', 'ip': '212.95.43.232', 'asn': 28753, 'latitude': 51.2993, 'as_org': 'Leaseweb Deutschland GmbH', 'longitude': 9.491, 'country_code2': 'DE'}

cli


{'country_code3': 'DE', 'city_name': 'Falkenstein', 'postal_code': '08223', 'continent_code': 'EU', 'ip': '176.9.10.143', 'as_org': 'Hetzner Online GmbH', 'latitude': 50.4777, 'location': {'lon': 12.3649, 'lat': 50.4777}, 'country_code2': 'DE', 'longitude': 12.3649, 'country_name': 'Germany', 'timezone': 'Europe/Berlin', 'asn': 24940, 'region_name': 'Saxony', 'region_code': 'SN'}


{'latitude': 21.9974, 'country_code2': 'IN', 'longitude': 79.0011, 'timezone': 'Asia/Kolkata', 'country_name': 'India', 'as_org': 'Gujarat Telelink Pvt Ltd', 'continent_code': 'AS', 'asn': 45916, 'country_code3': 'IN', 'ip': '43.243.36.32', 'location': {'lat': 21.9974, 'lon': 79.0011}}

cli


{'timezone': 'America/Chicago', 'ip': '167.248.133.116', 'asn': 398324, 'longitude': -97.822, 'location': {'lon': -97.822, 'lat': 37.751}, 'country_code2': 'US', 'latitude': 37.751, 'as_org': 'CENSYS-ARIN-01', 'country_name': 'United States', 'country_code3': 'US', 'continent_code': 'NA'}

cli


{'signature': 'ET INFO RDP connection request', 'action': 'allowed', 'metadata': {'confidence': ['High'], 'updated_at': ['2024_03_07'], 'created_at': ['2010_07_30'], 'signature_severity': ['Informational']}, 'category': 'Misc activity', 'severity': 3, 'rev': 10, 'gid': 1, 'signature_id': 2001329}


{'location': {'lat': 42.696, 'lon': 23.332}, 'longitude': 23.332, 'as_org': 'Dm Auto Eood', 'latitude': 42.696, 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'ip': '79.124.62.122', 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG'}

cli


{'location': {'lat': 42.696, 'lon': 23.332}, 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG', 'ip': '79.124.62.122', 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'latitude': 42.696, 'longitude': 23.332, 'as_org': 'Dm Auto Eood'}

srv


{'continent_code': 'EU', 'location': {'lat': 50.1169, 'lon': 8.6837}, 'country_code2': 'DE', 'latitude': 50.1169, 'country_name': 'Germany', 'postal_code': '60313', 'country_code3': 'DE', 'ip': '138.199.19.76', 'region_name': 'Hesse', 'timezone': 'Europe/Berlin', 'asn': 212238, 'region_code': 'HE', 'as_org': 'Datacamp Limited', 'city_name': 'Frankfurt am Main', 'longitude': 8.6837}


{'severity': 3, 'metadata': {'created_at': ['2010_07_30'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_07'], 'confidence': ['High']}, 'category': 'Misc activity', 'rev': 10, 'gid': 1, 'signature': 'ET INFO RDP connection request', 'action': 'allowed', 'signature_id': 2001329}

{'country_name': 'Poland', 'latitude': 52.2394, 'country_code2': 'PL', 'asn': 201814, 'country_code3': 'PL', 'continent_code': 'EU', 'longitude': 21.0362, 'as_org': 'MEVSPACE sp. z o.o.', 'location': {'lat': 52.2394, 'lon': 21.0362}, 'ip': '146.19.24.85', 'timezone': 'Europe/Warsaw'}


{'timezone': 'Europe/Helsinki', 'postal_code': '00191', 'longitude': 24.9347, 'city_name': 'Helsinki', 'continent_code': 'EU', 'country_code2': 'FI', 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_name': 'Finland', 'country_code3': 'FI', 'region_name': 'Uusimaa', 'ip': '95.216.15.123', 'latitude': 60.1719, 'asn': 24940}

srv


{'latitude': 35.0, 'timezone': 'Asia/Damascus', 'asn': 29256, 'country_code2': 'SY', 'country_name': 'Syria', 'country_code3': 'SY', 'location': {'lon': 38.0, 'lat': 35.0}, 'continent_code': 'AS', 'as_org': 'Syrian Telecommunication Private Closed Joint Stock Company', 'longitude': 38.0, 'ip': '91.144.21.210'}

cli


{'country_code2': 'US', 'timezone': 'America/Chicago', 'location': {'lon': -97.822, 'lat': 37.751}, 'ip': '112.196.222.60', 'latitude': 37.751, 'asn': 400342, 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'longitude': -97.822, 'as_org': 'EDGENAT-CLOUD'}

cli


{'rev': 10, 'action': 'allowed', 'gid': 1, 'category': 'Misc activity', 'severity': 3, 'metadata': {'created_at': ['2010_07_30'], 'confidence': ['High'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_07']}, 'signature': 'ET INFO RDP connection request', 'signature_id': 2001329}

{'country_name': 'Thailand', 'longitude': 100.4045, 'region_code': '12', 'country_code2': 'TH', 'ip': '61.91.163.146', 'postal_code': '11110', 'latitude': 13.9062, 'asn': 7470, 'timezone': 'Asia/Bangkok', 'city_name': 'Nonthaburi', 'region_name': 'Nonthaburi', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'continent_code': 'AS', 'location': {'lon': 100.4045, 'lat': 13.9062}}


{'longitude': 126.978, 'as_org': 'UCLOUD INFORMATION TECHNOLOGY HK LIMITED', 'country_code3': 'KR', 'country_name': 'South Korea', 'city_name': 'Seoul', 'timezone': 'Asia/Seoul', 'latitude': 37.5658, 'asn': 135377, 'continent_code': 'AS', 'region_name': 'Seoul', 'location': {'lat': 37.5658, 'lon': 126.978}, 'postal_code': '04524', 'country_code2': 'KR', 'region_code': '11', 'ip': '101.36.114.222'}


{'location': {'lon': -69.8965, 'lat': 18.4615}, 'latitude': 18.4615, 'longitude': -69.8965, 'region_code': '01', 'country_name': 'Dominican Republic', 'ip': '148.101.169.247', 'region_name': 'Nacional', 'timezone': 'America/Santo_Domingo', 'as_org': 'Compania Dominicana de Telefonos S. A.', 'postal_code': '10203', 'asn': 6400, 'city_name': 'Santo Domingo', 'country_code2': 'DO', 'continent_code': 'NA', 'country_code3': 'DO'}

srv


{'country_code3': 'DE', 'latitude': 51.2993, 'asn': 28753, 'timezone': 'Europe/Berlin', 'longitude': 9.491, 'as_org': 'Leaseweb Deutschland GmbH', 'continent_code': 'EU', 'ip': '212.95.43.233', 'country_code2': 'DE', 'country_name': 'Germany', 'location': {'lon': 9.491, 'lat': 51.2993}}

srv


{'region_code': 'MO', 'continent_code': 'NA', 'country_code3': 'US', 'location': {'lat': 39.1027, 'lon': -94.5778}, 'country_name': 'United States', 'timezone': 'America/Chicago', 'ip': '34.95.113.255', 'dma_code': 616, 'asn': 396982, 'latitude': 39.1027, 'as_org': 'GOOGLE-CLOUD-PLATFORM', 'postal_code': '64184', 'longitude': -94.5778, 'country_code2': 'US', 'region_name': 'Missouri', 'city_name': 'Kansas City'}


cli


srv


{'tcp_flags_tc': '12', 'ts_max_regions': 1, 'tcp_flags': '16', 'tc_max_regions': 1, 'syn': True, 'ack': True, 'state': 'closed', 'rst': True, 'tcp_flags_ts': '06'}


{'latitude': 18.5211, 'region_name': 'Maharashtra', 'country_code3': 'IN', 'continent_code': 'AS', 'region_code': 'MH', 'country_name': 'India', 'country_code2': 'IN', 'longitude': 73.8502, 'timezone': 'Asia/Kolkata', 'postal_code': '411005', 'asn': 134674, 'as_org': 'TATA PLAY BROADBAND PRIVATE LIMITED', 'city_name': 'Pune', 'ip': '103.80.161.145', 'location': {'lon': 73.8502, 'lat': 18.5211}}

{'tcp_flags': 'de', 'tcp_flags_ts': 'de', 'syn': True, 'rst': True, 'ack': True, 'ecn': True, 'psh': True, 'ts_max_regions': 1, 'tcp_flags_tc': '5a', 'cwr': True, 'state': 'closed', 'tc_max_regions': 1}


{'continent_code': 'EU', 'location': {'lat': 42.696, 'lon': 23.332}, 'country_code2': 'BG', 'latitude': 42.696, 'country_name': 'Bulgaria', 'country_code3': 'BG', 'ip': '194.180.49.42', 'timezone': 'Europe/Sofia', 'asn': 201814, 'as_org': 'MEVSPACE sp. z o.o.', 'longitude': 23.332}

srv


{'severity': 3, 'metadata': {'created_at': ['2010_09_23'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_08'], 'confidence': ['Medium']}, 'category': 'Generic Protocol Command Decode', 'rev': 15, 'cve_id': 'CVE-2001-0540', 'gid': 1, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'action': 'allowed', 'signature_id': 2101447}


{'ip': '146.19.24.85', 'asn': 201814, 'as_org': 'MEVSPACE sp. z o.o.', 'latitude': 52.2394, 'continent_code': 'EU', 'country_name': 'Poland', 'country_code2': 'PL', 'country_code3': 'PL', 'timezone': 'Europe/Warsaw', 'location': {'lat': 52.2394, 'lon': 21.0362}, 'longitude': 21.0362}


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}

{'hostname': '71.142.174.168', 'http_port': 10002, 'protocol': 'HTTP/1.1', 'http_method': 'POST', 'url': '/_search/scroll', 'http_user_agent': 'elasticsearch-py/8.0.0 (Python/3.12.2; elastic-transport/8.17.1)', 'status': 200, 'http_content_type': 'application/vnd.elasticsearch+json', 'length': 1201}

{'stored': False, 'state': 'CLOSED', 'filename': '/_search/scroll', 'magic': 'JSON text data', 'gaps': False, 'size': 1666, 'tx_id': 0, 'md5': 'e5cb894b5a3f8a750545072e1dab1dca'}


{'severity': 3, 'category': 'Misc activity', 'action': 'allowed', 'signature': 'ET INFO RDP connection request', 'signature_id': 2001329, 'metadata': {'confidence': ['High'], 'created_at': ['2010_07_30'], 'updated_at': ['2024_03_07'], 'signature_severity': ['Informational']}, 'gid': 1, 'rev': 10}

{'timezone': 'Europe/Zurich', 'longitude': 8.1551, 'continent_code': 'EU', 'country_code2': 'CH', 'as_org': 'Global-Data System IT Corporation', 'location': {'lat': 47.1449, 'lon': 8.1551}, 'country_name': 'Switzerland', 'country_code3': 'CH', 'ip': '185.196.8.121', 'latitude': 47.1449, 'asn': 42624}


{'severity': 3, 'signature_id': 2001329, 'metadata': {'signature_severity': ['Informational'], 'created_at': ['2010_07_30'], 'updated_at': ['2024_03_07'], 'confidence': ['High']}, 'category': 'Misc activity', 'signature': 'ET INFO RDP connection request', 'action': 'allowed', 'gid': 1, 'rev': 10}


{'country_name': 'China', 'continent_code': 'AS', 'latitude': 34.7732, 'timezone': 'Asia/Shanghai', 'longitude': 113.722, 'country_code3': 'CN', 'as_org': 'Chinanet', 'asn': 4134, 'country_code2': 'CN', 'location': {'lat': 34.7732, 'lon': 113.722}, 'ip': '180.100.210.216'}


{'continent_code': 'EU', 'country_code3': 'DE', 'location': {'lat': 51.2993, 'lon': 9.491}, 'country_name': 'Germany', 'timezone': 'Europe/Berlin', 'ip': '212.95.43.232', 'asn': 28753, 'latitude': 51.2993, 'as_org': 'Leaseweb Deutschland GmbH', 'longitude': 9.491, 'country_code2': 'DE'}


{'latitude': 21.9974, 'country_code2': 'IN', 'longitude': 79.0011, 'timezone': 'Asia/Kolkata', 'country_name': 'India', 'as_org': 'Gujarat Telelink Pvt Ltd', 'continent_code': 'AS', 'asn': 45916, 'country_code3': 'IN', 'ip': '43.243.36.32', 'location': {'lat': 21.9974, 'lon': 79.0011}}

srv


{'location': {'lat': 42.696, 'lon': 23.332}, 'longitude': 23.332, 'as_org': 'Tamatiya EOOD', 'latitude': 42.696, 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'ip': '78.128.114.38', 'country_code2': 'BG', 'asn': 50360, 'country_code3': 'BG'}

cli


{'location': {'lat': 42.696, 'lon': 23.332}, 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG', 'ip': '79.124.62.122', 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'latitude': 42.696, 'longitude': 23.332, 'as_org': 'Dm Auto Eood'}

cli


{'severity': 3, 'rev': 15, 'category': 'Generic Protocol Command Decode', 'signature_id': 2101447, 'cve_id': 'CVE-2001-0540', 'action': 'allowed', 'metadata': {'signature_severity': ['Informational'], 'confidence': ['Medium'], 'updated_at': ['2024_03_08'], 'created_at': ['2010_09_23']}, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'gid': 1}


{'latitude': 35.0, 'timezone': 'Asia/Damascus', 'asn': 29256, 'country_code2': 'SY', 'country_name': 'Syria', 'country_code3': 'SY', 'location': {'lon': 38.0, 'lat': 35.0}, 'continent_code': 'AS', 'as_org': 'Syrian Telecommunication Private Closed Joint Stock Company', 'longitude': 38.0, 'ip': '91.144.21.210'}

cli


{'region_code': 'NH', 'country_name': 'The Netherlands', 'continent_code': 'EU', 'latitude': 52.2986, 'timezone': 'Europe/Amsterdam', 'longitude': 4.9728, 'country_code3': 'NL', 'city_name': 'Amsterdam', 'postal_code': '1106', 'as_org': 'CHEAPY-HOST', 'region_name': 'North Holland', 'country_code2': 'NL', 'asn': 401120, 'location': {'lat': 52.2986, 'lon': 4.9728}, 'ip': '196.251.84.225'}

cli


{'country_name': 'United States', 'longitude': -97.822, 'country_code2': 'US', 'ip': '173.249.158.10', 'latitude': 37.751, 'asn': 36444, 'timezone': 'America/Chicago', 'as_org': 'NEXCESS-NET', 'country_code3': 'US', 'continent_code': 'NA', 'location': {'lon': -97.822, 'lat': 37.751}}

{'cmacts': 'hmac-sha2-256,hmac-sha2-512,hmac-sha1', 'hasshVersion': '1.0', 'cshka': 'ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss', 'ckex': 'curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1', 'hasshAlgorithms': 'curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none', 'clcts': 'languages_client_to_server string: ', 'ceastc': 'aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc', 'client': 'SSH-2.0-libssh_0.7.4', 'cmastc': 'hmac-sha2-256,hmac-sha2-512,hmac-sha1', 'ccacts': 'none', 'ccastc': 'none', 'ceacts': 'aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc', 'hassh': 'e37f354a101aff5871ba233aa82b84ec', 'clstc': 'languages_server_to_client string: '}


{'longitude': 10.9114, 'as_org': 'Railnet LLC', 'country_code3': 'DE', 'country_name': 'Germany', 'city_name': 'Augsburg', 'timezone': 'Europe/Berlin', 'latitude': 48.3506, 'asn': 214943, 'continent_code': 'EU', 'region_name': 'Bavaria', 'location': {'lat': 48.3506, 'lon': 10.9114}, 'postal_code': '86161', 'country_code2': 'DE', 'region_code': 'BY', 'ip': '213.209.156.12'}

{'state': 'closed', 'psh': True, 'ts_max_regions': 1, 'fin': True, 'tcp_flags_ts': '1b', 'tcp_flags_tc': '1f', 'ack': True, 'tc_max_regions': 1, 'rst': True, 'tcp_flags': '1f', 'syn': True}


{'gid': 1, 'severity': 3, 'category': 'Misc activity', 'rev': 10, 'action': 'allowed', 'signature': 'ET INFO RDP connection request', 'metadata': {'signature_severity': ['Informational'], 'created_at': ['2010_07_30'], 'confidence': ['High'], 'updated_at': ['2024_03_07']}, 'signature_id': 2001329}

{'location': {'lon': 100.4045, 'lat': 13.9062}, 'latitude': 13.9062, 'longitude': 100.4045, 'region_code': '12', 'country_name': 'Thailand', 'ip': '61.91.163.146', 'region_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'postal_code': '11110', 'asn': 7470, 'city_name': 'Nonthaburi', 'country_code2': 'TH', 'continent_code': 'AS', 'country_code3': 'TH'}


srv


{'city_name': 'North Bergen', 'timezone': 'America/New_York', 'region_name': 'New Jersey', 'ip': '143.198.165.234', 'asn': 14061, 'longitude': -74.0203, 'postal_code': '07047', 'country_code2': 'US', 'location': {'lon': -74.0203, 'lat': 40.7964}, 'latitude': 40.7964, 'country_name': 'United States', 'dma_code': 501, 'region_code': 'NJ', 'country_code3': 'US', 'as_org': 'DIGITALOCEAN-ASN', 'continent_code': 'NA'}

{'tcp_flags': 'de', 'rst': True, 'tc_max_regions': 1, 'syn': True, 'ts_max_regions': 1, 'state': 'closed', 'tcp_flags_tc': '1a', 'psh': True, 'ack': True, 'ecn': True, 'cwr': True, 'tcp_flags_ts': 'de'}


{'location': {'lon': 75.8337, 'lat': 22.717}, 'postal_code': '452003', 'longitude': 75.8337, 'ip': '103.27.232.245', 'country_name': 'India', 'country_code3': 'IN', 'country_code2': 'IN', 'region_code': 'MP', 'timezone': 'Asia/Kolkata', 'latitude': 22.717, 'asn': 132779, 'continent_code': 'AS', 'as_org': 'RackBank Datacenters Private Ltd', 'city_name': 'Indore', 'region_name': 'Madhya Pradesh'}


{'location': {'lat': 50.1169, 'lon': 8.6837}, 'region_code': 'HE', 'longitude': 8.6837, 'as_org': 'Datacamp Limited', 'postal_code': '60313', 'latitude': 50.1169, 'timezone': 'Europe/Berlin', 'continent_code': 'EU', 'country_name': 'Germany', 'ip': '138.199.19.76', 'country_code2': 'DE', 'city_name': 'Frankfurt am Main', 'asn': 212238, 'country_code3': 'DE', 'region_name': 'Hesse'}

srv


{'location': {'lat': 51.2993, 'lon': 9.491}, 'country_code2': 'DE', 'asn': 28753, 'country_code3': 'DE', 'ip': '212.95.43.224', 'timezone': 'Europe/Berlin', 'continent_code': 'EU', 'country_name': 'Germany', 'latitude': 51.2993, 'longitude': 9.491, 'as_org': 'Leaseweb Deutschland GmbH'}

{'ts_max_regions': 1, 'ecn': True, 'tcp_flags': 'de', 'cwr': True, 'psh': True, 'tcp_flags_ts': 'de', 'tc_max_regions': 1, 'syn': True, 'ack': True, 'state': 'closed', 'rst': True, 'tcp_flags_tc': '1a'}


{'location': {'lon': 23.332, 'lat': 42.696}, 'country_code3': 'BG', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'country_code2': 'BG', 'longitude': 23.332, 'timezone': 'Europe/Sofia', 'as_org': 'Dm Auto Eood', 'asn': 207812, 'ip': '79.124.62.122', 'latitude': 42.696}

{'tcp_flags': '16', 'ts_max_regions': 1, 'tcp_flags_tc': '12', 'state': 'closed', 'tcp_flags_ts': '06', 'syn': True, 'rst': True, 'tc_max_regions': 1, 'ack': True}


{'continent_code': 'EU', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_code2': 'FI', 'latitude': 60.1719, 'country_name': 'Finland', 'postal_code': '00191', 'country_code3': 'FI', 'ip': '135.181.216.152', 'region_name': 'Uusimaa', 'timezone': 'Europe/Helsinki', 'asn': 24940, 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'city_name': 'Helsinki', 'longitude': 24.9347}

srv


{'ip': '18.97.5.3', 'region_code': 'VA', 'asn': 14618, 'as_org': 'AMAZON-AES', 'postal_code': '20149', 'dma_code': 511, 'latitude': 39.0469, 'region_name': 'Virginia', 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'city_name': 'Ashburn', 'country_code2': 'US', 'timezone': 'America/New_York', 'location': {'lat': 39.0469, 'lon': -77.4903}, 'longitude': -77.4903}

cli


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}


{'timezone': 'America/New_York', 'postal_code': '10001', 'longitude': -74.0014, 'city_name': 'New York', 'continent_code': 'NA', 'country_code2': 'US', 'region_code': 'NY', 'as_org': 'metaspinner net GmbH', 'location': {'lat': 40.7503, 'lon': -74.0014}, 'country_name': 'United States', 'country_code3': 'US', 'dma_code': 501, 'ip': '178.16.55.163', 'region_name': 'New York', 'latitude': 40.7503, 'asn': 209800}

cli


{'postal_code': '86090', 'as_org': 'UNINET', 'country_code3': 'MX', 'latitude': 17.9776, 'asn': 8151, 'longitude': -92.9221, 'region_code': 'TAB', 'continent_code': 'NA', 'timezone': 'America/Mexico_City', 'ip': '189.230.100.92', 'country_code2': 'MX', 'city_name': 'Centro Municipality', 'location': {'lat': 17.9776, 'lon': -92.9221}, 'country_name': 'Mexico', 'region_name': 'Tabasco'}

cli


{'continent_code': 'EU', 'country_code3': 'NL', 'longitude': 4.8995, 'ip': '176.65.148.205', 'country_name': 'The Netherlands', 'timezone': 'Europe/Amsterdam', 'as_org': 'Pfcloud UG', 'asn': 51396, 'country_code2': 'NL', 'location': {'lon': 4.8995, 'lat': 52.3824}, 'latitude': 52.3824}

{'tc_max_regions': 1, 'state': 'closed', 'tcp_flags_ts': '1f', 'fin': True, 'psh': True, 'ack': True, 'ts_max_regions': 1, 'tcp_flags': '1f', 'tcp_flags_tc': '1b', 'syn': True, 'rst': True}


{'region_code': 'MH', 'continent_code': 'AS', 'country_code3': 'IN', 'location': {'lat': 19.0748, 'lon': 72.8856}, 'country_name': 'India', 'timezone': 'Asia/Kolkata', 'ip': '152.32.159.79', 'asn': 135377, 'latitude': 19.0748, 'as_org': 'UCLOUD INFORMATION TECHNOLOGY HK LIMITED', 'postal_code': '400017', 'longitude': 72.8856, 'country_code2': 'IN', 'region_name': 'Maharashtra', 'city_name': 'Mumbai'}

cli


{'latitude': 21.9974, 'country_code2': 'IN', 'longitude': 79.0011, 'timezone': 'Asia/Kolkata', 'country_name': 'India', 'as_org': 'Gujarat Telelink Pvt Ltd', 'continent_code': 'AS', 'asn': 45916, 'country_code3': 'IN', 'ip': '43.243.36.32', 'location': {'lat': 21.9974, 'lon': 79.0011}}

srv


{'signature': 'GPL INFO MS Remote Desktop Request RDP', 'action': 'allowed', 'metadata': {'confidence': ['Medium'], 'updated_at': ['2024_03_08'], 'created_at': ['2010_09_23'], 'signature_severity': ['Informational']}, 'category': 'Generic Protocol Command Decode', 'severity': 3, 'rev': 15, 'cve_id': 'CVE-2001-0540', 'gid': 1, 'signature_id': 2101447}


cli


{'location': {'lat': 35.698, 'lon': 51.4115}, 'country_code2': 'IR', 'asn': 214295, 'country_code3': 'IR', 'ip': '194.0.234.12', 'timezone': 'Asia/Tehran', 'continent_code': 'AS', 'country_name': 'Iran', 'latitude': 35.698, 'longitude': 51.4115, 'as_org': 'Skynet Network Ltd'}

cli


{'location': {'lon': 4.8995, 'lat': 52.3824}, 'country_code3': 'NL', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'country_code2': 'NL', 'longitude': 4.8995, 'timezone': 'Europe/Amsterdam', 'as_org': '1337 Services GmbH', 'asn': 210558, 'ip': '192.159.99.162', 'latitude': 52.3824}

{'tcp_flags': '1b', 'fin': True, 'psh': True, 'ts_max_regions': 1, 'tcp_flags_tc': '13', 'state': 'closed', 'tcp_flags_ts': '1b', 'syn': True, 'tc_max_regions': 1, 'ack': True}


{'country_name': 'Bangladesh', 'latitude': 23.7018, 'country_code2': 'BD', 'asn': 23688, 'country_code3': 'BD', 'continent_code': 'AS', 'longitude': 90.3742, 'as_org': 'Link3 Technologies Ltd.', 'location': {'lat': 23.7018, 'lon': 90.3742}, 'ip': '163.47.35.89', 'timezone': 'Asia/Dhaka'}

cli


cli

1:User-Agent,Accept-Encoding=[gzip, deflate],Accept=[*/*],Connection=[keep-alive],Host:Accept-Language,Accept-Charset,Keep-Alive:Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3067.95 Safari/537.32


{'hostname': '71.142.174.168', 'http_port': 10002, 'protocol': 'HTTP/1.1', 'http_method': 'POST', 'url': '/_search/scroll', 'http_user_agent': 'elasticsearch-py/8.0.0 (Python/3.12.2; elastic-transport/8.17.1)', 'status': 200, 'http_content_type': 'application/vnd.elasticsearch+json', 'length': 542732}


srv


{'latitude': 51.2993, 'timezone': 'Europe/Berlin', 'asn': 208191, 'country_code2': 'DE', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 9.491, 'lat': 51.2993}, 'continent_code': 'EU', 'as_org': 'Go Host Ltd', 'longitude': 9.491, 'ip': '176.65.134.6'}

srv


{'region_code': 'NH', 'country_name': 'The Netherlands', 'continent_code': 'EU', 'latitude': 52.2986, 'timezone': 'Europe/Amsterdam', 'longitude': 4.9728, 'country_code3': 'NL', 'city_name': 'Amsterdam', 'postal_code': '1106', 'as_org': 'CHEAPY-HOST', 'region_name': 'North Holland', 'country_code2': 'NL', 'asn': 401120, 'location': {'lat': 52.2986, 'lon': 4.9728}, 'ip': '196.251.84.225'}

srv


{'country_name': 'The Netherlands', 'longitude': 4.8975, 'region_code': 'NH', 'country_code2': 'NL', 'ip': '152.53.104.82', 'postal_code': '1012', 'latitude': 52.3759, 'asn': 197540, 'timezone': 'Europe/Amsterdam', 'city_name': 'Amsterdam', 'region_name': 'North Holland', 'as_org': 'netcup GmbH', 'country_code3': 'NL', 'continent_code': 'EU', 'location': {'lon': 4.8975, 'lat': 52.3759}}

{'tcp_flags': 'df', 'ecn': True, 'tc_max_regions': 1, 'cwr': True, 'fin': True, 'syn': True, 'state': 'closed', 'tcp_flags_tc': '1b', 'ts_max_regions': 1, 'psh': True, 'tcp_flags_ts': 'df', 'ack': True, 'rst': True}


{'location': {'lon': 100.4045, 'lat': 13.9062}, 'latitude': 13.9062, 'longitude': 100.4045, 'region_code': '12', 'country_name': 'Thailand', 'ip': '61.91.163.146', 'region_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'postal_code': '11110', 'asn': 7470, 'city_name': 'Nonthaburi', 'country_code2': 'TH', 'continent_code': 'AS', 'country_code3': 'TH'}


{'country_code3': 'DE', 'city_name': 'Falkenstein', 'postal_code': '08223', 'continent_code': 'EU', 'ip': '176.9.10.143', 'as_org': 'Hetzner Online GmbH', 'latitude': 50.4777, 'location': {'lon': 12.3649, 'lat': 50.4777}, 'country_code2': 'DE', 'longitude': 12.3649, 'country_name': 'Germany', 'timezone': 'Europe/Berlin', 'asn': 24940, 'region_name': 'Saxony', 'region_code': 'SN'}


{'city_name': 'Beijing', 'timezone': 'Asia/Shanghai', 'region_name': 'Beijing', 'ip': '43.143.163.119', 'asn': 45090, 'longitude': 116.395, 'location': {'lon': 116.395, 'lat': 39.911}, 'country_code2': 'CN', 'latitude': 39.911, 'as_org': 'Shenzhen Tencent Computer Systems Company Limited', 'country_name': 'China', 'region_code': 'BJ', 'country_code3': 'CN', 'continent_code': 'AS'}

srv


{'location': {'lon': 4.9392, 'lat': 52.352}, 'postal_code': '1098', 'longitude': 4.9392, 'ip': '188.226.148.205', 'country_name': 'The Netherlands', 'country_code3': 'NL', 'country_code2': 'NL', 'region_code': 'NH', 'timezone': 'Europe/Amsterdam', 'latitude': 52.352, 'asn': 14061, 'continent_code': 'EU', 'as_org': 'DIGITALOCEAN-ASN', 'city_name': 'Amsterdam', 'region_name': 'North Holland'}

{'psh': True, 'tcp_flags_ts': '1b', 'ts_max_regions': 1, 'fin': True, 'state': 'closed', 'tcp_flags_tc': '1b', 'syn': True, 'tcp_flags': '1b', 'ack': True, 'tc_max_regions': 1}


{'location': {'lat': 50.1169, 'lon': 8.6837}, 'region_code': 'HE', 'longitude': 8.6837, 'as_org': 'Datacamp Limited', 'postal_code': '60313', 'latitude': 50.1169, 'timezone': 'Europe/Berlin', 'continent_code': 'EU', 'country_name': 'Germany', 'ip': '138.199.19.76', 'country_code2': 'DE', 'city_name': 'Frankfurt am Main', 'asn': 212238, 'country_code3': 'DE', 'region_name': 'Hesse'}

srv


{'location': {'lat': 42.696, 'lon': 23.332}, 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG', 'ip': '79.124.62.122', 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'latitude': 42.696, 'longitude': 23.332, 'as_org': 'Dm Auto Eood'}

srv


{'continent_code': 'EU', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_code2': 'FI', 'latitude': 60.1719, 'country_name': 'Finland', 'postal_code': '00191', 'country_code3': 'FI', 'ip': '135.181.216.152', 'region_name': 'Uusimaa', 'timezone': 'Europe/Helsinki', 'asn': 24940, 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'city_name': 'Helsinki', 'longitude': 24.9347}

cli


{'ip': '18.97.5.3', 'region_code': 'VA', 'asn': 14618, 'as_org': 'AMAZON-AES', 'postal_code': '20149', 'dma_code': 511, 'latitude': 39.0469, 'region_name': 'Virginia', 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'city_name': 'Ashburn', 'country_code2': 'US', 'timezone': 'America/New_York', 'location': {'lat': 39.0469, 'lon': -77.4903}, 'longitude': -77.4903}

srv


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}


{'region_name': 'North', 'latitude': 50.9855, 'timezone': 'Europe/Paris', 'country_code2': 'FR', 'country_code3': 'FR', 'city_name': 'Gravelines', 'region_code': '59', 'country_name': 'France', 'postal_code': '59820', 'asn': 213412, 'location': {'lon': 2.1322, 'lat': 50.9855}, 'continent_code': 'EU', 'as_org': 'ONYPHE SAS', 'longitude': 2.1322, 'ip': '91.231.89.205'}

{'tcp_flags': '02', 'ts_max_regions': 1, 'state': 'syn_sent', 'tcp_flags_ts': '02', 'tcp_flags_tc': '00', 'tc_max_regions': 1, 'syn': True}


{'postal_code': '86090', 'as_org': 'UNINET', 'country_code3': 'MX', 'latitude': 17.9776, 'asn': 8151, 'longitude': -92.9221, 'region_code': 'TAB', 'continent_code': 'NA', 'timezone': 'America/Mexico_City', 'ip': '189.230.100.92', 'country_code2': 'MX', 'city_name': 'Centro Municipality', 'location': {'lat': 17.9776, 'lon': -92.9221}, 'country_name': 'Mexico', 'region_name': 'Tabasco'}

srv


{'country_name': 'United States', 'longitude': -97.822, 'country_code2': 'US', 'ip': '173.249.158.10', 'latitude': 37.751, 'asn': 36444, 'timezone': 'America/Chicago', 'as_org': 'NEXCESS-NET', 'country_code3': 'US', 'continent_code': 'NA', 'location': {'lon': -97.822, 'lat': 37.751}}

cli


{'longitude': 100.4045, 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'country_name': 'Thailand', 'city_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'latitude': 13.9062, 'asn': 7470, 'continent_code': 'AS', 'region_name': 'Nonthaburi', 'location': {'lat': 13.9062, 'lon': 100.4045}, 'postal_code': '11110', 'country_code2': 'TH', 'region_code': '12', 'ip': '61.91.163.146'}

cli


{'cve_id': 'CVE-2001-0540', 'gid': 1, 'severity': 3, 'category': 'Generic Protocol Command Decode', 'rev': 15, 'action': 'allowed', 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'metadata': {'signature_severity': ['Informational'], 'created_at': ['2010_09_23'], 'confidence': ['Medium'], 'updated_at': ['2024_03_08']}, 'signature_id': 2101447}


{'region_code': 'MH', 'continent_code': 'AS', 'country_code3': 'IN', 'location': {'lat': 19.0748, 'lon': 72.8856}, 'country_name': 'India', 'timezone': 'Asia/Kolkata', 'ip': '152.32.159.79', 'asn': 135377, 'latitude': 19.0748, 'as_org': 'UCLOUD INFORMATION TECHNOLOGY HK LIMITED', 'postal_code': '400017', 'longitude': 72.8856, 'country_code2': 'IN', 'region_name': 'Maharashtra', 'city_name': 'Mumbai'}

cli


{'latitude': 51.2993, 'country_code2': 'DE', 'longitude': 9.491, 'timezone': 'Europe/Berlin', 'country_name': 'Germany', 'as_org': 'Leaseweb Deutschland GmbH', 'continent_code': 'EU', 'asn': 28753, 'country_code3': 'DE', 'ip': '212.95.43.232', 'location': {'lat': 51.2993, 'lon': 9.491}}

cli


{'city_name': 'Ho Chi Minh City', 'timezone': 'Asia/Ho_Chi_Minh', 'region_name': 'Ho Chi Minh', 'ip': '14.169.16.183', 'asn': 45899, 'longitude': 106.6257, 'postal_code': '700000', 'country_code2': 'VN', 'location': {'lon': 106.6257, 'lat': 10.822}, 'latitude': 10.822, 'country_name': 'Vietnam', 'region_code': 'SG', 'as_org': 'VNPT Corp', 'country_code3': 'VN', 'continent_code': 'AS'}

srv


{'longitude': 23.332, 'ip': '79.124.58.254', 'country_name': 'Bulgaria', 'country_code3': 'BG', 'country_code2': 'BG', 'timezone': 'Europe/Sofia', 'latitude': 42.696, 'asn': 50360, 'continent_code': 'EU', 'as_org': 'Tamatiya EOOD', 'location': {'lon': 23.332, 'lat': 42.696}}

{'rst': True, 'tcp_flags_ts': '06', 'ts_max_regions': 1, 'state': 'closed', 'tcp_flags_tc': '12', 'syn': True, 'tcp_flags': '16', 'ack': True, 'tc_max_regions': 1}


srv


{'latitude': 45.9968, 'timezone': 'Europe/Bucharest', 'asn': 12695, 'country_code2': 'RO', 'country_name': 'Romania', 'country_code3': 'RO', 'location': {'lon': 24.997, 'lat': 45.9968}, 'continent_code': 'EU', 'as_org': 'LLC Digital Network', 'longitude': 24.997, 'ip': '45.142.193.172'}

cli


{'region_code': 'NH', 'country_name': 'The Netherlands', 'continent_code': 'EU', 'latitude': 52.2986, 'timezone': 'Europe/Amsterdam', 'longitude': 4.9728, 'country_code3': 'NL', 'city_name': 'Amsterdam', 'postal_code': '1106', 'as_org': 'CHEAPY-HOST', 'region_name': 'North Holland', 'country_code2': 'NL', 'asn': 401120, 'location': {'lat': 52.2986, 'lon': 4.9728}, 'ip': '196.251.84.225'}


{'as_org': 'Railnet LLC', 'ip': '213.209.156.6', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 10.9114, 'lat': 48.3506}, 'country_code2': 'DE', 'asn': 214943, 'region_name': 'Bavaria', 'continent_code': 'EU', 'postal_code': '86161', 'timezone': 'Europe/Berlin', 'latitude': 48.3506, 'region_code': 'BY', 'city_name': 'Augsburg', 'longitude': 10.9114}

cli


cli


{'location': {'lon': -78.1539, 'lat': 38.7095}, 'latitude': 38.7095, 'longitude': -78.1539, 'dma_code': 511, 'region_code': 'VA', 'country_name': 'United States', 'ip': '52.186.183.28', 'region_name': 'Virginia', 'timezone': 'America/New_York', 'as_org': 'MICROSOFT-CORP-MSN-AS-BLOCK', 'postal_code': '22747', 'asn': 8075, 'city_name': 'Washington', 'country_code2': 'US', 'continent_code': 'NA', 'country_code3': 'US'}

{'event_type': 'tls_handshake', 'x509_serials': ['0'], 'tx_id': 3}


{'country_code3': 'CN', 'city_name': 'Xiamen', 'latitude': 24.4793, 'asn': 4837, 'timezone': 'Asia/Shanghai', 'longitude': 118.0673, 'as_org': 'CHINA UNICOM China169 Backbone', 'continent_code': 'AS', 'region_name': 'Fujian', 'ip': '58.23.144.125', 'country_code2': 'CN', 'region_code': 'FJ', 'country_name': 'China', 'location': {'lon': 118.0673, 'lat': 24.4793}}

{'tx_id': 2, 'event_type': 'initial_response', 'protocol': 'ssl'}


{'cve_id': 'CVE-2001-0540', 'gid': 1, 'action': 'allowed', 'category': 'Generic Protocol Command Decode', 'signature_id': 2101447, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'rev': 15, 'metadata': {'signature_severity': ['Informational'], 'confidence': ['Medium'], 'updated_at': ['2024_03_08'], 'created_at': ['2010_09_23']}, 'severity': 3}


{'location': {'lon': 75.8337, 'lat': 22.717}, 'postal_code': '452003', 'longitude': 75.8337, 'ip': '103.27.232.245', 'country_name': 'India', 'country_code3': 'IN', 'country_code2': 'IN', 'region_code': 'MP', 'timezone': 'Asia/Kolkata', 'latitude': 22.717, 'asn': 132779, 'continent_code': 'AS', 'as_org': 'RackBank Datacenters Private Ltd', 'city_name': 'Indore', 'region_name': 'Madhya Pradesh'}

srv


{'action': 'allowed', 'gid': 1, 'category': 'Misc activity', 'signature': 'ET INFO RDP connection request', 'signature_id': 2001329, 'severity': 3, 'rev': 10, 'metadata': {'created_at': ['2010_07_30'], 'signature_severity': ['Informational'], 'confidence': ['High'], 'updated_at': ['2024_03_07']}}

{'location': {'lat': 50.1169, 'lon': 8.6837}, 'region_code': 'HE', 'longitude': 8.6837, 'as_org': 'Datacamp Limited', 'postal_code': '60313', 'latitude': 50.1169, 'timezone': 'Europe/Berlin', 'continent_code': 'EU', 'country_name': 'Germany', 'ip': '138.199.19.76', 'country_code2': 'DE', 'city_name': 'Frankfurt am Main', 'asn': 212238, 'country_code3': 'DE', 'region_name': 'Hesse'}


{'action': 'allowed', 'category': 'Attempted Administrator Privilege Gain', 'metadata': {'affected_product': ['Microsoft_Terminal_Server_RDP'], 'mitre_tactic_name': ['Initial_Access'], 'updated_at': ['2022_05_03'], 'mitre_tactic_id': ['TA0001'], 'confidence': ['High'], 'tag': ['Description_Generated_By_Proofpoint_Nexus'], 'deployment': ['Internal', 'Perimeter'], 'signature_severity': ['Major'], 'mitre_technique_id': ['T1190'], 'mitre_technique_name': ['Exploit_Public_Facing_Application'], 'created_at': ['2022_01_04']}, 'signature_id': 2034857, 'severity': 1, 'signature': 'ET HUNTING RDP Authentication Bypass Attempt', 'source': {'port': 63428, 'ip': '194.0.234.12'}, 'target': {'port': 20289, 'ip': '10.31.40.21'}, 'gid': 1, 'rev': 3}

{'location': {'lat': 35.698, 'lon': 51.4115}, 'country_code2': 'IR', 'asn': 214295, 'country_code3': 'IR', 'ip': '194.0.234.12', 'timezone': 'Asia/Tehran', 'continent_code': 'AS', 'country_name': 'Iran', 'latitude': 35.698, 'longitude': 51.4115, 'as_org': 'Skynet Network Ltd'}


{'metadata': {'created_at': ['2010_07_30'], 'confidence': ['High'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_07']}, 'signature_id': 2001329, 'action': 'allowed', 'gid': 1, 'signature': 'ET INFO RDP connection request', 'rev': 10, 'category': 'Misc activity', 'severity': 3}

{'continent_code': 'EU', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_code2': 'FI', 'latitude': 60.1719, 'country_name': 'Finland', 'postal_code': '00191', 'country_code3': 'FI', 'ip': '135.181.216.152', 'region_name': 'Uusimaa', 'timezone': 'Europe/Helsinki', 'asn': 24940, 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'city_name': 'Helsinki', 'longitude': 24.9347}


{'country_name': 'Bangladesh', 'latitude': 23.7018, 'country_code2': 'BD', 'asn': 23688, 'country_code3': 'BD', 'continent_code': 'AS', 'longitude': 90.3742, 'as_org': 'Link3 Technologies Ltd.', 'location': {'lat': 23.7018, 'lon': 90.3742}, 'ip': '163.47.35.89', 'timezone': 'Asia/Dhaka'}


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}

cli


{'timezone': 'Europe/Helsinki', 'postal_code': '00191', 'longitude': 24.9347, 'city_name': 'Helsinki', 'continent_code': 'EU', 'country_code2': 'FI', 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_name': 'Finland', 'country_code3': 'FI', 'region_name': 'Uusimaa', 'ip': '95.216.15.123', 'latitude': 60.1719, 'asn': 24940}


{'country_code2': 'DE', 'timezone': 'Europe/Berlin', 'location': {'lon': 8.6837, 'lat': 50.1169}, 'ip': '212.102.57.167', 'latitude': 50.1169, 'postal_code': '60313', 'asn': 212238, 'continent_code': 'EU', 'country_code3': 'DE', 'country_name': 'Germany', 'longitude': 8.6837, 'region_name': 'Hesse', 'region_code': 'HE', 'as_org': 'Datacamp Limited', 'city_name': 'Frankfurt am Main'}

srv


{'country_name': 'Thailand', 'longitude': 100.4045, 'region_code': '12', 'country_code2': 'TH', 'ip': '61.91.163.146', 'postal_code': '11110', 'latitude': 13.9062, 'asn': 7470, 'timezone': 'Asia/Bangkok', 'city_name': 'Nonthaburi', 'region_name': 'Nonthaburi', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'continent_code': 'AS', 'location': {'lon': 100.4045, 'lat': 13.9062}}

cli


{'longitude': 100.4045, 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'country_name': 'Thailand', 'city_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'latitude': 13.9062, 'asn': 7470, 'continent_code': 'AS', 'region_name': 'Nonthaburi', 'location': {'lat': 13.9062, 'lon': 100.4045}, 'postal_code': '11110', 'country_code2': 'TH', 'region_code': '12', 'ip': '61.91.163.146'}

srv


{'metadata': {'updated_at': ['2024_03_07'], 'created_at': ['2010_07_30'], 'signature_severity': ['Informational'], 'confidence': ['High']}, 'signature': 'ET INFO RDP connection request', 'action': 'allowed', 'category': 'Misc activity', 'severity': 3, 'gid': 1, 'signature_id': 2001329, 'rev': 10}

{'country_code3': 'FI', 'city_name': 'Helsinki', 'latitude': 60.1719, 'postal_code': '00191', 'timezone': 'Europe/Helsinki', 'longitude': 24.9347, 'asn': 24940, 'as_org': 'Hetzner Online GmbH', 'continent_code': 'EU', 'region_name': 'Uusimaa', 'ip': '95.216.38.94', 'country_code2': 'FI', 'region_code': '18', 'country_name': 'Finland', 'location': {'lon': 24.9347, 'lat': 60.1719}}


srv


{'latitude': 51.2993, 'country_code2': 'DE', 'longitude': 9.491, 'timezone': 'Europe/Berlin', 'country_name': 'Germany', 'as_org': 'Leaseweb Deutschland GmbH', 'continent_code': 'EU', 'asn': 28753, 'country_code3': 'DE', 'ip': '212.95.43.232', 'location': {'lat': 51.2993, 'lon': 9.491}}


{'city_name': 'Frankfurt am Main', 'timezone': 'Europe/Berlin', 'region_name': 'Hesse', 'ip': '89.35.130.86', 'asn': 214309, 'longitude': 8.6837, 'postal_code': '60313', 'country_code2': 'DE', 'location': {'lon': 8.6837, 'lat': 50.1169}, 'latitude': 50.1169, 'country_name': 'Germany', 'region_code': 'HE', 'as_org': 'Aurorix Gaming Solutions Limited', 'country_code3': 'DE', 'continent_code': 'EU'}

{'tcp_flags': '1b', 'psh': True, 'ack': True, 'tc_max_regions': 1, 'syn': True, 'ts_max_regions': 1, 'fin': True, 'state': 'time_wait', 'tcp_flags_ts': '1b', 'tcp_flags_tc': '1b'}


{'action': 'allowed', 'category': 'Attempted Information Leak', 'metadata': {'attack_target': ['Server'], 'affected_product': ['Microsoft_Terminal_Server_RDP'], 'updated_at': ['2024_03_07'], 'confidence': ['Medium'], 'deployment': ['Perimeter'], 'performance_impact': ['Low'], 'created_at': ['2017_01_23'], 'signature_severity': ['Major']}, 'signature_id': 2023753, 'severity': 2, 'signature': 'ET SCAN MS Terminal Server Traffic on Non-standard Port', 'gid': 1, 'rev': 4}


{'metadata': {'created_at': ['2010_09_23'], 'confidence': ['Medium'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_08']}, 'cve_id': 'CVE-2001-0540', 'signature_id': 2101447, 'action': 'allowed', 'gid': 1, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'rev': 15, 'category': 'Generic Protocol Command Decode', 'severity': 3}


{'ip': '18.97.5.3', 'region_code': 'VA', 'asn': 14618, 'as_org': 'AMAZON-AES', 'postal_code': '20149', 'dma_code': 511, 'latitude': 39.0469, 'region_name': 'Virginia', 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'city_name': 'Ashburn', 'country_code2': 'US', 'timezone': 'America/New_York', 'location': {'lat': 39.0469, 'lon': -77.4903}, 'longitude': -77.4903}

srv


{'latitude': 45.9968, 'timezone': 'Europe/Bucharest', 'asn': 12695, 'country_code2': 'RO', 'country_name': 'Romania', 'country_code3': 'RO', 'location': {'lon': 24.997, 'lat': 45.9968}, 'continent_code': 'EU', 'as_org': 'LLC Digital Network', 'longitude': 24.997, 'ip': '45.142.193.172'}

srv


{'country_code2': 'US', 'timezone': 'America/Chicago', 'location': {'lon': -97.822, 'lat': 37.751}, 'ip': '112.196.222.60', 'latitude': 37.751, 'asn': 400342, 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'longitude': -97.822, 'as_org': 'EDGENAT-CLOUD'}

srv


{'signature': 'GPL INFO MS Remote Desktop Request RDP', 'category': 'Generic Protocol Command Decode', 'gid': 1, 'signature_id': 2101447, 'rev': 15, 'metadata': {'confidence': ['Medium'], 'updated_at': ['2024_03_08'], 'signature_severity': ['Informational'], 'created_at': ['2010_09_23']}, 'cve_id': 'CVE-2001-0540', 'action': 'allowed', 'severity': 3}

{'country_name': 'China', 'continent_code': 'AS', 'latitude': 34.7732, 'timezone': 'Asia/Shanghai', 'longitude': 113.722, 'country_code3': 'CN', 'as_org': 'Chinanet', 'asn': 4134, 'country_code2': 'CN', 'location': {'lat': 34.7732, 'lon': 113.722}, 'ip': '180.100.210.216'}

{'tx_id': 3, 'event_type': 'tls_handshake', 'x509_serials': ['0']}


{'as_org': 'Railnet LLC', 'ip': '213.209.156.6', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 10.9114, 'lat': 48.3506}, 'country_code2': 'DE', 'asn': 214943, 'region_name': 'Bavaria', 'continent_code': 'EU', 'postal_code': '86161', 'timezone': 'Europe/Berlin', 'latitude': 48.3506, 'region_code': 'BY', 'city_name': 'Augsburg', 'longitude': 10.9114}

srv


{'metadata': {'updated_at': ['2024_03_08'], 'created_at': ['2010_09_23'], 'signature_severity': ['Informational'], 'confidence': ['Medium']}, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'action': 'allowed', 'category': 'Generic Protocol Command Decode', 'severity': 3, 'gid': 1, 'signature_id': 2101447, 'rev': 15, 'cve_id': 'CVE-2001-0540'}


{'city_name': 'Ho Chi Minh City', 'timezone': 'Asia/Ho_Chi_Minh', 'region_name': 'Ho Chi Minh', 'ip': '14.169.16.183', 'asn': 45899, 'longitude': 106.6257, 'postal_code': '700000', 'country_code2': 'VN', 'location': {'lon': 106.6257, 'lat': 10.822}, 'latitude': 10.822, 'country_name': 'Vietnam', 'region_code': 'SG', 'as_org': 'VNPT Corp', 'country_code3': 'VN', 'continent_code': 'AS'}


{'location': {'lon': 75.8337, 'lat': 22.717}, 'postal_code': '452003', 'longitude': 75.8337, 'ip': '103.27.232.245', 'country_name': 'India', 'country_code3': 'IN', 'country_code2': 'IN', 'region_code': 'MP', 'timezone': 'Asia/Kolkata', 'latitude': 22.717, 'asn': 132779, 'continent_code': 'AS', 'as_org': 'RackBank Datacenters Private Ltd', 'city_name': 'Indore', 'region_name': 'Madhya Pradesh'}


{'city_name': 'Bangkok', 'postal_code': '10250', 'location': {'lat': 13.8582, 'lon': 100.478}, 'country_code2': 'TH', 'asn': 7470, 'country_code3': 'TH', 'ip': '61.91.163.146', 'timezone': 'Asia/Bangkok', 'continent_code': 'AS', 'country_name': 'Thailand', 'region_name': 'Bangkok', 'latitude': 13.8582, 'region_code': '10', 'longitude': 100.478, 'as_org': 'TRUE INTERNET Co.,Ltd.'}

cli


{'ip': '45.142.193.171', 'asn': 214295, 'as_org': 'Skynet Network Ltd', 'latitude': 45.9968, 'continent_code': 'EU', 'country_name': 'Romania', 'country_code2': 'RO', 'country_code3': 'RO', 'timezone': 'Europe/Bucharest', 'location': {'lat': 45.9968, 'lon': 24.997}, 'longitude': 24.997}

{'tcp_flags_ts': '06', 'state': 'closed', 'tcp_flags_tc': '12', 'ack': True, 'tc_max_regions': 1, 'tcp_flags': '16', 'syn': True, 'ts_max_regions': 1, 'rst': True}


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}

srv


{'timezone': 'America/Los_Angeles', 'postal_code': '98160', 'longitude': -122.3303, 'city_name': 'Seattle', 'continent_code': 'NA', 'country_code2': 'US', 'region_code': 'WA', 'as_org': 'Datacamp Limited', 'location': {'lat': 47.6109, 'lon': -122.3303}, 'country_name': 'United States', 'country_code3': 'US', 'dma_code': 819, 'ip': '156.146.51.217', 'region_name': 'Washington', 'latitude': 47.6109, 'asn': 212238}

cli


{'latitude': 35.0, 'timezone': 'Asia/Damascus', 'asn': 29256, 'country_code2': 'SY', 'country_name': 'Syria', 'country_code3': 'SY', 'location': {'lon': 38.0, 'lat': 35.0}, 'continent_code': 'AS', 'as_org': 'Syrian Telecommunication Private Closed Joint Stock Company', 'longitude': 38.0, 'ip': '91.144.21.210'}

srv


{'country_code2': 'VN', 'timezone': 'Asia/Bangkok', 'location': {'lon': 107.8333, 'lat': 16.1667}, 'ip': '125.212.225.61', 'latitude': 16.1667, 'asn': 38731, 'continent_code': 'AS', 'country_code3': 'VN', 'country_name': 'Vietnam', 'longitude': 107.8333, 'as_org': 'CHT Compamy Ltd'}


{'country_name': 'United States', 'continent_code': 'NA', 'latitude': 37.751, 'timezone': 'America/Chicago', 'longitude': -97.822, 'country_code3': 'US', 'as_org': 'CTG Server Limited', 'asn': 152194, 'country_code2': 'US', 'location': {'lat': 37.751, 'lon': -97.822}, 'ip': '192.252.183.48'}

{'ecn': True, 'tcp_flags': 'df', 'ack': True, 'fin': True, 'tcp_flags_tc': '1b', 'rst': True, 'psh': True, 'state': 'closed', 'cwr': True, 'ts_max_regions': 1, 'tcp_flags_ts': 'df', 'syn': True, 'tc_max_regions': 1}


cli


{'rev': 10, 'action': 'allowed', 'gid': 1, 'category': 'Misc activity', 'severity': 3, 'metadata': {'created_at': ['2010_07_30'], 'confidence': ['High'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_07']}, 'signature': 'ET INFO RDP connection request', 'signature_id': 2001329}

{'country_name': 'Thailand', 'longitude': 100.4045, 'region_code': '12', 'country_code2': 'TH', 'ip': '61.91.163.146', 'postal_code': '11110', 'latitude': 13.9062, 'asn': 7470, 'timezone': 'Asia/Bangkok', 'city_name': 'Nonthaburi', 'region_name': 'Nonthaburi', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'continent_code': 'AS', 'location': {'lon': 100.4045, 'lat': 13.9062}}


{'longitude': 100.4045, 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'country_name': 'Thailand', 'city_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'latitude': 13.9062, 'asn': 7470, 'continent_code': 'AS', 'region_name': 'Nonthaburi', 'location': {'lat': 13.9062, 'lon': 100.4045}, 'postal_code': '11110', 'country_code2': 'TH', 'region_code': '12', 'ip': '61.91.163.146'}

srv


{'location': {'lon': -69.8965, 'lat': 18.4615}, 'latitude': 18.4615, 'longitude': -69.8965, 'region_code': '01', 'country_name': 'Dominican Republic', 'ip': '148.101.169.247', 'region_name': 'Nacional', 'timezone': 'America/Santo_Domingo', 'as_org': 'Compania Dominicana de Telefonos S. A.', 'postal_code': '10203', 'asn': 6400, 'city_name': 'Santo Domingo', 'country_code2': 'DO', 'continent_code': 'NA', 'country_code3': 'DO'}

srv


{'country_code3': 'DE', 'latitude': 51.2993, 'asn': 28753, 'timezone': 'Europe/Berlin', 'longitude': 9.491, 'as_org': 'Leaseweb Deutschland GmbH', 'continent_code': 'EU', 'ip': '212.95.43.233', 'country_code2': 'DE', 'country_name': 'Germany', 'location': {'lon': 9.491, 'lat': 51.2993}}


{'region_code': 'MH', 'continent_code': 'AS', 'country_code3': 'IN', 'location': {'lat': 19.0748, 'lon': 72.8856}, 'country_name': 'India', 'timezone': 'Asia/Kolkata', 'ip': '152.32.159.79', 'asn': 135377, 'latitude': 19.0748, 'as_org': 'UCLOUD INFORMATION TECHNOLOGY HK LIMITED', 'postal_code': '400017', 'longitude': 72.8856, 'country_code2': 'IN', 'region_name': 'Maharashtra', 'city_name': 'Mumbai'}

cli


{'city_name': 'Amsterdam', 'timezone': 'Europe/Amsterdam', 'region_name': 'North Holland', 'ip': '196.251.66.163', 'asn': 401116, 'longitude': 4.9728, 'postal_code': '1106', 'country_code2': 'NL', 'location': {'lon': 4.9728, 'lat': 52.2986}, 'latitude': 52.2986, 'country_name': 'The Netherlands', 'region_code': 'NH', 'as_org': 'NYBULA', 'country_code3': 'NL', 'continent_code': 'EU'}

{'tcp_flags': '1f', 'rst': True, 'tc_max_regions': 1, 'syn': True, 'ts_max_regions': 1, 'fin': True, 'state': 'closed', 'tcp_flags_tc': '1f', 'psh': True, 'ack': True, 'tcp_flags_ts': '1b'}


{'location': {'lon': 4.9392, 'lat': 52.352}, 'postal_code': '1098', 'longitude': 4.9392, 'ip': '188.226.148.205', 'country_name': 'The Netherlands', 'country_code3': 'NL', 'country_code2': 'NL', 'region_code': 'NH', 'timezone': 'Europe/Amsterdam', 'latitude': 52.352, 'asn': 14061, 'continent_code': 'EU', 'as_org': 'DIGITALOCEAN-ASN', 'city_name': 'Amsterdam', 'region_name': 'North Holland'}

{'cmacts': 'hmac-sha2-256,hmac-sha2-512,hmac-sha1', 'hassh': 'e37f354a101aff5871ba233aa82b84ec', 'ceastc': 'aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc', 'ckex': 'curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1', 'cmastc': 'hmac-sha2-256,hmac-sha2-512,hmac-sha1', 'hasshAlgorithms': 'curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none', 'ccacts': 'none', 'ceacts': 'aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc', 'hasshVersion': '1.0', 'clcts': 'languages_client_to_server string: ', 'cshka': 'ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss', 'ccastc': 'none', 'client': 'SSH-2.0-libssh_0.7.4', 'clstc': 'languages_server_to_client string: '}


{'location': {'lat': 52.3824, 'lon': 4.8995}, 'longitude': 4.8995, 'as_org': 'Pfcloud UG', 'latitude': 52.3824, 'timezone': 'Europe/Amsterdam', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'ip': '45.156.87.14', 'country_code2': 'NL', 'asn': 51396, 'country_code3': 'NL'}

cli


{'location': {'lat': 42.696, 'lon': 23.332}, 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG', 'ip': '79.124.62.122', 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'latitude': 42.696, 'longitude': 23.332, 'as_org': 'Dm Auto Eood'}


{'location': {'lon': 4.8995, 'lat': 52.3824}, 'country_code3': 'NL', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'country_code2': 'NL', 'longitude': 4.8995, 'timezone': 'Europe/Amsterdam', 'as_org': '1337 Services GmbH', 'asn': 210558, 'ip': '192.159.99.162', 'latitude': 52.3824}

{'tcp_flags': '1b', 'fin': True, 'psh': True, 'ts_max_regions': 1, 'tcp_flags_tc': '1b', 'state': 'closed', 'tcp_flags_ts': '1b', 'syn': True, 'tc_max_regions': 1, 'ack': True}


{'country_name': 'Finland', 'city_name': 'Helsinki', 'region_code': '18', 'latitude': 60.1719, 'country_code2': 'FI', 'asn': 24940, 'country_code3': 'FI', 'continent_code': 'EU', 'postal_code': '00191', 'longitude': 24.9347, 'location': {'lat': 60.1719, 'lon': 24.9347}, 'ip': '135.181.216.152', 'region_name': 'Uusimaa', 'timezone': 'Europe/Helsinki', 'as_org': 'Hetzner Online GmbH'}

cli


{'timezone': 'America/New_York', 'postal_code': '10001', 'longitude': -74.0014, 'city_name': 'New York', 'continent_code': 'NA', 'country_code2': 'US', 'region_code': 'NY', 'as_org': 'metaspinner net GmbH', 'location': {'lat': 40.7503, 'lon': -74.0014}, 'country_name': 'United States', 'country_code3': 'US', 'dma_code': 501, 'ip': '178.16.55.163', 'region_name': 'New York', 'latitude': 40.7503, 'asn': 209800}

srv


srv


{'signature': 'ET INFO RDP connection request', 'category': 'Misc activity', 'gid': 1, 'signature_id': 2001329, 'rev': 10, 'metadata': {'confidence': ['High'], 'updated_at': ['2024_03_07'], 'signature_severity': ['Informational'], 'created_at': ['2010_07_30']}, 'action': 'allowed', 'severity': 3}

{'country_name': 'India', 'continent_code': 'AS', 'latitude': 21.9974, 'timezone': 'Asia/Kolkata', 'longitude': 79.0011, 'country_code3': 'IN', 'as_org': 'INDINET SERVICE PRIVATE LIMITED', 'asn': 132115, 'country_code2': 'IN', 'location': {'lat': 21.9974, 'lon': 79.0011}, 'ip': '150.129.176.226'}


{'as_org': 'Railnet LLC', 'ip': '213.209.156.6', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 10.9114, 'lat': 48.3506}, 'country_code2': 'DE', 'asn': 214943, 'region_name': 'Bavaria', 'continent_code': 'EU', 'postal_code': '86161', 'timezone': 'Europe/Berlin', 'latitude': 48.3506, 'region_code': 'BY', 'city_name': 'Augsburg', 'longitude': 10.9114}

srv


{'location': {'lon': -78.1539, 'lat': 38.7095}, 'latitude': 38.7095, 'longitude': -78.1539, 'dma_code': 511, 'region_code': 'VA', 'country_name': 'United States', 'ip': '52.186.183.28', 'region_name': 'Virginia', 'timezone': 'America/New_York', 'as_org': 'MICROSOFT-CORP-MSN-AS-BLOCK', 'postal_code': '22747', 'asn': 8075, 'city_name': 'Washington', 'country_code2': 'US', 'continent_code': 'NA', 'country_code3': 'US'}

{'protocol': 'ssl', 'event_type': 'initial_response', 'tx_id': 2}


{'country_code3': 'FI', 'city_name': 'Helsinki', 'latitude': 60.1719, 'postal_code': '00191', 'timezone': 'Europe/Helsinki', 'longitude': 24.9347, 'asn': 24940, 'as_org': 'Hetzner Online GmbH', 'continent_code': 'EU', 'region_name': 'Uusimaa', 'ip': '95.216.38.94', 'country_code2': 'FI', 'region_code': '18', 'country_name': 'Finland', 'location': {'lon': 24.9347, 'lat': 60.1719}}


cli


{'latitude': 52.2986, 'country_code2': 'NL', 'longitude': 4.9728, 'timezone': 'Europe/Amsterdam', 'country_name': 'The Netherlands', 'as_org': 'NYBULA', 'continent_code': 'EU', 'asn': 401116, 'city_name': 'Amsterdam', 'country_code3': 'NL', 'region_code': 'NH', 'ip': '196.251.115.97', 'location': {'lat': 52.2986, 'lon': 4.9728}, 'postal_code': '1106', 'region_name': 'North Holland'}

{'fin': True, 'tcp_flags': '1f', 'ts_max_regions': 1, 'syn': True, 'tcp_flags_tc': '1f', 'tcp_flags_ts': '1b', 'state': 'closed', 'ack': True, 'tc_max_regions': 1, 'psh': True, 'rst': True}


{'continent_code': 'EU', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_code2': 'FI', 'latitude': 60.1719, 'country_name': 'Finland', 'postal_code': '00191', 'country_code3': 'FI', 'ip': '135.181.216.152', 'region_name': 'Uusimaa', 'timezone': 'Europe/Helsinki', 'asn': 24940, 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'city_name': 'Helsinki', 'longitude': 24.9347}


{'ip': '18.97.5.3', 'region_code': 'VA', 'asn': 14618, 'as_org': 'AMAZON-AES', 'postal_code': '20149', 'dma_code': 511, 'latitude': 39.0469, 'region_name': 'Virginia', 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'city_name': 'Ashburn', 'country_code2': 'US', 'timezone': 'America/New_York', 'location': {'lat': 39.0469, 'lon': -77.4903}, 'longitude': -77.4903}

srv


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}

{'tcp_flags_ts': '1b', 'fin': True, 'state': 'closed', 'syn': True, 'tcp_flags': '1b', 'tc_max_regions': 1, 'ts_max_regions': 1, 'ack': True, 'tcp_flags_tc': '1b', 'psh': True}


{'latitude': 35.0, 'timezone': 'Asia/Damascus', 'asn': 29256, 'country_code2': 'SY', 'country_name': 'Syria', 'country_code3': 'SY', 'location': {'lon': 38.0, 'lat': 35.0}, 'continent_code': 'AS', 'as_org': 'Syrian Telecommunication Private Closed Joint Stock Company', 'longitude': 38.0, 'ip': '91.144.21.210'}

srv


{'postal_code': '86090', 'as_org': 'UNINET', 'country_code3': 'MX', 'latitude': 17.9776, 'asn': 8151, 'longitude': -92.9221, 'region_code': 'TAB', 'continent_code': 'NA', 'timezone': 'America/Mexico_City', 'ip': '189.230.100.92', 'country_code2': 'MX', 'city_name': 'Centro Municipality', 'location': {'lat': 17.9776, 'lon': -92.9221}, 'country_name': 'Mexico', 'region_name': 'Tabasco'}

{'syn': True, 'psh': True, 'state': 'closed', 'tc_max_regions': 1, 'ts_max_regions': 1, 'tcp_flags_ts': '1b', 'tcp_flags': '1b', 'ack': True, 'tcp_flags_tc': '1b', 'fin': True}


{'longitude': 100.4045, 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'country_name': 'Thailand', 'city_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'latitude': 13.9062, 'asn': 7470, 'continent_code': 'AS', 'region_name': 'Nonthaburi', 'location': {'lat': 13.9062, 'lon': 100.4045}, 'postal_code': '11110', 'country_code2': 'TH', 'region_code': '12', 'ip': '61.91.163.146'}


{'region_code': 'MH', 'continent_code': 'AS', 'country_code3': 'IN', 'location': {'lat': 19.0748, 'lon': 72.8856}, 'country_name': 'India', 'timezone': 'Asia/Kolkata', 'ip': '152.32.159.79', 'asn': 135377, 'latitude': 19.0748, 'as_org': 'UCLOUD INFORMATION TECHNOLOGY HK LIMITED', 'postal_code': '400017', 'longitude': 72.8856, 'country_code2': 'IN', 'region_name': 'Maharashtra', 'city_name': 'Mumbai'}

srv


{'city_name': 'Amsterdam', 'timezone': 'Europe/Amsterdam', 'region_name': 'North Holland', 'ip': '196.251.66.163', 'asn': 401116, 'longitude': 4.9728, 'postal_code': '1106', 'country_code2': 'NL', 'location': {'lon': 4.9728, 'lat': 52.2986}, 'latitude': 52.2986, 'country_name': 'The Netherlands', 'region_code': 'NH', 'as_org': 'NYBULA', 'country_code3': 'NL', 'continent_code': 'EU'}

cli


{'location': {'lon': 4.9392, 'lat': 52.352}, 'postal_code': '1098', 'longitude': 4.9392, 'ip': '188.226.148.205', 'country_name': 'The Netherlands', 'country_code3': 'NL', 'country_code2': 'NL', 'region_code': 'NH', 'timezone': 'Europe/Amsterdam', 'latitude': 52.352, 'asn': 14061, 'continent_code': 'EU', 'as_org': 'DIGITALOCEAN-ASN', 'city_name': 'Amsterdam', 'region_name': 'North Holland'}


{'action': 'allowed', 'gid': 1, 'category': 'Generic Protocol Command Decode', 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'signature_id': 2101447, 'cve_id': 'CVE-2001-0540', 'severity': 3, 'rev': 15, 'metadata': {'created_at': ['2010_09_23'], 'signature_severity': ['Informational'], 'confidence': ['Medium'], 'updated_at': ['2024_03_08']}}

{'location': {'lat': 52.3824, 'lon': 4.8995}, 'longitude': 4.8995, 'as_org': 'Pfcloud UG', 'latitude': 52.3824, 'timezone': 'Europe/Amsterdam', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'ip': '45.156.87.14', 'country_code2': 'NL', 'asn': 51396, 'country_code3': 'NL'}


{'country_name': 'Finland', 'city_name': 'Helsinki', 'region_code': '18', 'latitude': 60.1719, 'country_code2': 'FI', 'asn': 24940, 'country_code3': 'FI', 'continent_code': 'EU', 'postal_code': '00191', 'longitude': 24.9347, 'location': {'lat': 60.1719, 'lon': 24.9347}, 'ip': '135.181.216.152', 'region_name': 'Uusimaa', 'timezone': 'Europe/Helsinki', 'as_org': 'Hetzner Online GmbH'}

srv


srv


{'severity': 3, 'category': 'Misc activity', 'action': 'allowed', 'signature': 'ET INFO RDP connection request', 'signature_id': 2001329, 'metadata': {'confidence': ['High'], 'created_at': ['2010_07_30'], 'updated_at': ['2024_03_07'], 'signature_severity': ['Informational']}, 'gid': 1, 'rev': 10}

{'timezone': 'Europe/Helsinki', 'postal_code': '00191', 'longitude': 24.9347, 'city_name': 'Helsinki', 'continent_code': 'EU', 'country_code2': 'FI', 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_name': 'Finland', 'country_code3': 'FI', 'region_name': 'Uusimaa', 'ip': '95.216.15.123', 'latitude': 60.1719, 'asn': 24940}


{'latitude': 51.2993, 'timezone': 'Europe/Berlin', 'asn': 208191, 'country_code2': 'DE', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 9.491, 'lat': 51.2993}, 'continent_code': 'EU', 'as_org': 'Go Host Ltd', 'longitude': 9.491, 'ip': '176.65.134.6'}

srv


{'longitude': 37.6068, 'as_org': 'Tele-plus LLC', 'country_name': 'Russia', 'country_code3': 'RU', 'timezone': 'Europe/Moscow', 'latitude': 55.7386, 'asn': 30855, 'continent_code': 'EU', 'location': {'lat': 55.7386, 'lon': 37.6068}, 'country_code2': 'RU', 'ip': '217.114.179.30'}

{'state': 'fin_wait1', 'ts_max_regions': 1, 'fin': True, 'ecn': True, 'tcp_flags_ts': 'd2', 'tcp_flags_tc': '53', 'ack': True, 'tc_max_regions': 1, 'tcp_flags': 'd3', 'cwr': True, 'syn': True}


{'latitude': 13.8582, 'country_code2': 'TH', 'longitude': 100.478, 'timezone': 'Asia/Bangkok', 'country_name': 'Thailand', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'continent_code': 'AS', 'asn': 7470, 'city_name': 'Bangkok', 'country_code3': 'TH', 'region_code': '10', 'ip': '61.91.163.146', 'location': {'lat': 13.8582, 'lon': 100.478}, 'postal_code': '10250', 'region_name': 'Bangkok'}

{'cwr': True, 'tcp_flags': 'de', 'ts_max_regions': 1, 'syn': True, 'tcp_flags_tc': '1a', 'tcp_flags_ts': 'de', 'state': 'closed', 'ack': True, 'tc_max_regions': 1, 'ecn': True, 'psh': True, 'rst': True}


{'timezone': 'Europe/Moscow', 'ip': '178.176.229.228', 'asn': 24866, 'longitude': 37.6068, 'location': {'lon': 37.6068, 'lat': 55.7386}, 'country_code2': 'RU', 'latitude': 55.7386, 'as_org': 'PJSC MegaFon', 'country_name': 'Russia', 'country_code3': 'RU', 'continent_code': 'EU'}

cli


{'server': {'proto_version': '2.0', 'software_version': 'OpenSSH_7.9p1'}}


{'location': {'lat': 42.696, 'lon': 23.332}, 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG', 'ip': '79.124.62.122', 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'latitude': 42.696, 'longitude': 23.332, 'as_org': 'Dm Auto Eood'}

{'tcp_flags_tc': '12', 'ts_max_regions': 1, 'tcp_flags': '16', 'tc_max_regions': 1, 'syn': True, 'ack': True, 'state': 'closed', 'rst': True, 'tcp_flags_ts': '06'}


{'location': {'lon': 4.8995, 'lat': 52.3824}, 'country_code3': 'NL', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'country_code2': 'NL', 'longitude': 4.8995, 'timezone': 'Europe/Amsterdam', 'as_org': '1337 Services GmbH', 'asn': 210558, 'ip': '192.159.99.162', 'latitude': 52.3824}

{'tcp_flags': '16', 'ts_max_regions': 1, 'tcp_flags_tc': '12', 'state': 'closed', 'tcp_flags_ts': '06', 'syn': True, 'rst': True, 'tc_max_regions': 1, 'ack': True}


{'ip': '18.97.5.3', 'region_code': 'VA', 'asn': 14618, 'as_org': 'AMAZON-AES', 'postal_code': '20149', 'dma_code': 511, 'latitude': 39.0469, 'region_name': 'Virginia', 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'city_name': 'Ashburn', 'country_code2': 'US', 'timezone': 'America/New_York', 'location': {'lat': 39.0469, 'lon': -77.4903}, 'longitude': -77.4903}

srv


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}

srv


{'severity': 3, 'category': 'Generic Protocol Command Decode', 'action': 'allowed', 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'signature_id': 2101447, 'metadata': {'confidence': ['Medium'], 'created_at': ['2010_09_23'], 'updated_at': ['2024_03_08'], 'signature_severity': ['Informational']}, 'cve_id': 'CVE-2001-0540', 'gid': 1, 'rev': 15}


{'country_code2': 'NL', 'timezone': 'Europe/Amsterdam', 'location': {'lon': 4.8995, 'lat': 52.3824}, 'ip': '45.156.87.179', 'latitude': 52.3824, 'asn': 51396, 'continent_code': 'EU', 'country_code3': 'NL', 'country_name': 'The Netherlands', 'longitude': 4.8995, 'as_org': 'Pfcloud UG'}

{'psh': True, 'tcp_flags_tc': '1b', 'tcp_flags': '1b', 'ts_max_regions': 1, 'tcp_flags_ts': '1b', 'tc_max_regions': 1, 'syn': True, 'fin': True, 'ack': True, 'state': 'closed'}


{'postal_code': '86090', 'as_org': 'UNINET', 'country_code3': 'MX', 'latitude': 17.9776, 'asn': 8151, 'longitude': -92.9221, 'region_code': 'TAB', 'continent_code': 'NA', 'timezone': 'America/Mexico_City', 'ip': '189.230.100.92', 'country_code2': 'MX', 'city_name': 'Centro Municipality', 'location': {'lat': 17.9776, 'lon': -92.9221}, 'country_name': 'Mexico', 'region_name': 'Tabasco'}

cli


{'as_org': 'Railnet LLC', 'ip': '213.209.156.6', 'country_name': 'Germany', 'country_code3': 'DE', 'location': {'lon': 10.9114, 'lat': 48.3506}, 'country_code2': 'DE', 'asn': 214943, 'region_name': 'Bavaria', 'continent_code': 'EU', 'postal_code': '86161', 'timezone': 'Europe/Berlin', 'latitude': 48.3506, 'region_code': 'BY', 'city_name': 'Augsburg', 'longitude': 10.9114}

cli


{'country_name': 'Thailand', 'longitude': 100.4045, 'region_code': '12', 'country_code2': 'TH', 'ip': '61.91.163.146', 'postal_code': '11110', 'latitude': 13.9062, 'asn': 7470, 'timezone': 'Asia/Bangkok', 'city_name': 'Nonthaburi', 'region_name': 'Nonthaburi', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'continent_code': 'AS', 'location': {'lon': 100.4045, 'lat': 13.9062}}


{'longitude': 113.722, 'as_org': 'Chinanet', 'country_name': 'China', 'country_code3': 'CN', 'timezone': 'Asia/Shanghai', 'latitude': 34.7732, 'asn': 4134, 'continent_code': 'AS', 'location': {'lat': 34.7732, 'lon': 113.722}, 'country_code2': 'CN', 'ip': '106.58.216.236'}

{'state': 'closed', 'psh': True, 'ts_max_regions': 1, 'fin': True, 'tcp_flags_ts': '1f', 'tcp_flags_tc': '1b', 'ack': True, 'tc_max_regions': 1, 'rst': True, 'tcp_flags': '1f', 'syn': True}


{'country_code3': 'CN', 'latitude': 39.911, 'longitude': 116.395, 'region_code': 'BJ', 'country_name': 'China', 'ip': '113.44.155.243', 'region_name': 'Beijing', 'timezone': 'Asia/Shanghai', 'as_org': 'Huawei Cloud Service data center', 'asn': 55990, 'city_name': 'Beijing', 'country_code2': 'CN', 'location': {'lon': 116.395, 'lat': 39.911}, 'continent_code': 'AS'}

{'tc_max_regions': 1, 'ecn': True, 'state': 'closed', 'tcp_flags_ts': 'de', 'ack': True, 'psh': True, 'ts_max_regions': 1, 'tcp_flags': 'de', 'cwr': True, 'tcp_flags_tc': '16', 'syn': True, 'rst': True}


{'country_code3': 'FI', 'city_name': 'Helsinki', 'latitude': 60.1719, 'postal_code': '00191', 'timezone': 'Europe/Helsinki', 'longitude': 24.9347, 'asn': 24940, 'as_org': 'Hetzner Online GmbH', 'continent_code': 'EU', 'region_name': 'Uusimaa', 'ip': '95.216.38.94', 'country_code2': 'FI', 'region_code': '18', 'country_name': 'Finland', 'location': {'lon': 24.9347, 'lat': 60.1719}}


{'rev': 10, 'action': 'allowed', 'category': 'Misc activity', 'severity': 3, 'signature': 'ET INFO RDP connection request', 'metadata': {'created_at': ['2010_07_30'], 'confidence': ['High'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_07']}, 'signature_id': 2001329, 'gid': 1}

{'latitude': 51.2993, 'country_code2': 'DE', 'longitude': 9.491, 'timezone': 'Europe/Berlin', 'country_name': 'Germany', 'as_org': 'Leaseweb Deutschland GmbH', 'continent_code': 'EU', 'asn': 28753, 'country_code3': 'DE', 'ip': '212.95.43.232', 'location': {'lat': 51.2993, 'lon': 9.491}}

{'protocol': 'ssl', 'tx_id': 2, 'event_type': 'initial_response'}


cli


{'location': {'lat': 52.3824, 'lon': 4.8995}, 'longitude': 4.8995, 'as_org': 'Pfcloud UG', 'latitude': 52.3824, 'timezone': 'Europe/Amsterdam', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'ip': '45.156.87.14', 'country_code2': 'NL', 'asn': 51396, 'country_code3': 'NL'}


{'location': {'lat': 45.9968, 'lon': 24.997}, 'country_code2': 'RO', 'asn': 214295, 'country_code3': 'RO', 'ip': '45.142.193.169', 'timezone': 'Europe/Bucharest', 'continent_code': 'EU', 'country_name': 'Romania', 'latitude': 45.9968, 'longitude': 24.997, 'as_org': 'Skynet Network Ltd'}


{'severity': 3, 'metadata': {'created_at': ['2010_07_30'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_07'], 'confidence': ['High']}, 'category': 'Misc activity', 'rev': 10, 'gid': 1, 'signature': 'ET INFO RDP connection request', 'action': 'allowed', 'signature_id': 2001329}

{'country_name': 'Poland', 'latitude': 52.2394, 'country_code2': 'PL', 'asn': 201814, 'country_code3': 'PL', 'continent_code': 'EU', 'longitude': 21.0362, 'as_org': 'MEVSPACE sp. z o.o.', 'location': {'lat': 52.2394, 'lon': 21.0362}, 'ip': '146.19.24.85', 'timezone': 'Europe/Warsaw'}


{'timezone': 'Europe/Bucharest', 'country_name': 'Romania', 'location': {'lat': 45.9968, 'lon': 24.997}, 'longitude': 24.997, 'ip': '45.142.193.172', 'latitude': 45.9968, 'as_org': 'Skynet Network Ltd', 'continent_code': 'EU', 'country_code3': 'RO', 'asn': 214295, 'country_code2': 'RO'}

srv


{'timezone': 'Europe/Helsinki', 'postal_code': '00191', 'longitude': 24.9347, 'city_name': 'Helsinki', 'continent_code': 'EU', 'country_code2': 'FI', 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_name': 'Finland', 'country_code3': 'FI', 'region_name': 'Uusimaa', 'ip': '95.216.15.123', 'latitude': 60.1719, 'asn': 24940}


{'signature_id': 2001329, 'category': 'Misc activity', 'gid': 1, 'signature': 'ET INFO RDP connection request', 'severity': 3, 'rev': 10, 'action': 'allowed', 'metadata': {'confidence': ['High'], 'signature_severity': ['Informational'], 'created_at': ['2010_07_30'], 'updated_at': ['2024_03_07']}}

{'region_name': 'Uusimaa', 'latitude': 60.1719, 'timezone': 'Europe/Helsinki', 'country_code2': 'FI', 'country_code3': 'FI', 'city_name': 'Helsinki', 'region_code': '18', 'country_name': 'Finland', 'postal_code': '00191', 'asn': 24940, 'location': {'lon': 24.9347, 'lat': 60.1719}, 'continent_code': 'EU', 'as_org': 'Hetzner Online GmbH', 'longitude': 24.9347, 'ip': '95.217.198.93'}


{'country_code2': 'FI', 'timezone': 'Europe/Helsinki', 'location': {'lon': 24.9347, 'lat': 60.1719}, 'ip': '95.217.198.93', 'latitude': 60.1719, 'postal_code': '00191', 'asn': 24940, 'continent_code': 'EU', 'country_code3': 'FI', 'country_name': 'Finland', 'longitude': 24.9347, 'region_name': 'Uusimaa', 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'city_name': 'Helsinki'}


{'country_name': 'China', 'continent_code': 'AS', 'latitude': 34.7732, 'timezone': 'Asia/Shanghai', 'longitude': 113.722, 'country_code3': 'CN', 'as_org': 'Chinanet', 'asn': 4134, 'country_code2': 'CN', 'location': {'lat': 34.7732, 'lon': 113.722}, 'ip': '180.100.210.216'}


srv


{'longitude': 126.978, 'as_org': 'UCLOUD INFORMATION TECHNOLOGY HK LIMITED', 'country_code3': 'KR', 'country_name': 'South Korea', 'city_name': 'Seoul', 'timezone': 'Asia/Seoul', 'latitude': 37.5658, 'asn': 135377, 'continent_code': 'AS', 'region_name': 'Seoul', 'location': {'lat': 37.5658, 'lon': 126.978}, 'postal_code': '04524', 'country_code2': 'KR', 'region_code': '11', 'ip': '101.36.114.222'}

{'state': 'closed', 'psh': True, 'tcp_flags_ts': '13', 'tcp_flags_tc': '1b', 'ack': True, 'ts_max_regions': 1, 'tc_max_regions': 1, 'fin': True, 'tcp_flags': '1b', 'syn': True}


{'location': {'lon': 100.4045, 'lat': 13.9062}, 'latitude': 13.9062, 'longitude': 100.4045, 'region_code': '12', 'country_name': 'Thailand', 'ip': '61.91.163.146', 'region_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'as_org': 'TRUE INTERNET Co.,Ltd.', 'postal_code': '11110', 'asn': 7470, 'city_name': 'Nonthaburi', 'country_code2': 'TH', 'continent_code': 'AS', 'country_code3': 'TH'}

cli


{'country_code3': 'DE', 'latitude': 51.2993, 'asn': 28753, 'timezone': 'Europe/Berlin', 'longitude': 9.491, 'as_org': 'Leaseweb Deutschland GmbH', 'continent_code': 'EU', 'ip': '212.95.43.233', 'country_code2': 'DE', 'country_name': 'Germany', 'location': {'lon': 9.491, 'lat': 51.2993}}


{'timezone': 'Europe/Moscow', 'ip': '178.176.229.228', 'asn': 24866, 'longitude': 37.6068, 'location': {'lon': 37.6068, 'lat': 55.7386}, 'country_code2': 'RU', 'latitude': 55.7386, 'as_org': 'PJSC MegaFon', 'country_name': 'Russia', 'country_code3': 'RU', 'continent_code': 'EU'}

srv


{'location': {'lon': 75.8337, 'lat': 22.717}, 'postal_code': '452003', 'longitude': 75.8337, 'ip': '103.27.232.245', 'country_name': 'India', 'country_code3': 'IN', 'country_code2': 'IN', 'region_code': 'MP', 'timezone': 'Asia/Kolkata', 'latitude': 22.717, 'asn': 132779, 'continent_code': 'AS', 'as_org': 'RackBank Datacenters Private Ltd', 'city_name': 'Indore', 'region_name': 'Madhya Pradesh'}

cli


{'action': 'allowed', 'gid': 1, 'category': 'Misc Attack', 'signature': 'ET CINS Active Threat Intelligence Poor Reputation IP group 61', 'signature_id': 2403360, 'severity': 2, 'rev': 103143, 'metadata': {'created_at': ['2013_10_08'], 'deployment': ['Perimeter'], 'signature_severity': ['Major'], 'updated_at': ['2025_09_15'], 'attack_target': ['Any'], 'tag': ['CINS'], 'affected_product': ['Any']}}

{'location': {'lat': 45.4722, 'lon': 9.1922}, 'region_code': 'MI', 'longitude': 9.1922, 'as_org': 'KAMATERA', 'postal_code': '20144', 'latitude': 45.4722, 'timezone': 'Europe/Rome', 'continent_code': 'EU', 'country_name': 'Italy', 'ip': '45.147.250.208', 'country_code2': 'IT', 'city_name': 'Milan', 'asn': 36007, 'country_code3': 'IT', 'region_name': 'Province of Milan'}


{'action': 'allowed', 'category': 'Generic Protocol Command Decode', 'signature_id': 2210051, 'severity': 3, 'signature': 'SURICATA STREAM Packet with broken ack', 'gid': 1, 'rev': 2}

{'location': {'lat': 35.698, 'lon': 51.4115}, 'country_code2': 'IR', 'asn': 214295, 'country_code3': 'IR', 'ip': '194.0.234.12', 'timezone': 'Asia/Tehran', 'continent_code': 'AS', 'country_name': 'Iran', 'latitude': 35.698, 'longitude': 51.4115, 'as_org': 'Skynet Network Ltd'}


{'location': {'lon': 4.8995, 'lat': 52.3824}, 'country_code3': 'NL', 'continent_code': 'EU', 'country_name': 'The Netherlands', 'country_code2': 'NL', 'longitude': 4.8995, 'timezone': 'Europe/Amsterdam', 'as_org': '1337 Services GmbH', 'asn': 210558, 'ip': '192.159.99.162', 'latitude': 52.3824}

{'tcp_flags': '1b', 'fin': True, 'psh': True, 'ts_max_regions': 1, 'tcp_flags_tc': '13', 'state': 'closed', 'tcp_flags_ts': '1b', 'syn': True, 'tc_max_regions': 1, 'ack': True}


{'continent_code': 'EU', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_code2': 'FI', 'latitude': 60.1719, 'country_name': 'Finland', 'postal_code': '00191', 'country_code3': 'FI', 'ip': '135.181.216.152', 'region_name': 'Uusimaa', 'timezone': 'Europe/Helsinki', 'asn': 24940, 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'city_name': 'Helsinki', 'longitude': 24.9347}

{'tcp_flags': 'de', 'syn': True, 'rst': True, 'ts_max_regions': 1, 'ack': True, 'tcp_flags_tc': '1a', 'ecn': True, 'tc_max_regions': 1, 'cwr': True, 'psh': True, 'tcp_flags_ts': 'de', 'state': 'closed'}


{'severity': 3, 'metadata': {'created_at': ['2010_09_23'], 'signature_severity': ['Informational'], 'updated_at': ['2024_03_08'], 'confidence': ['Medium']}, 'category': 'Generic Protocol Command Decode', 'rev': 15, 'cve_id': 'CVE-2001-0540', 'gid': 1, 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'action': 'allowed', 'signature_id': 2101447}


{'ip': '18.97.5.3', 'region_code': 'VA', 'asn': 14618, 'as_org': 'AMAZON-AES', 'postal_code': '20149', 'dma_code': 511, 'latitude': 39.0469, 'region_name': 'Virginia', 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'city_name': 'Ashburn', 'country_code2': 'US', 'timezone': 'America/New_York', 'location': {'lat': 39.0469, 'lon': -77.4903}, 'longitude': -77.4903}

cli

1:Host,User-Agent,Accept-encoding=[gzip],Accept=[*/*],Connection=[keep-alive]:Accept-Encoding,Accept-Language,Accept-Charset,Keep-Alive:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36


{'timezone': 'America/Los_Angeles', 'postal_code': '98160', 'longitude': -122.3303, 'city_name': 'Seattle', 'continent_code': 'NA', 'country_code2': 'US', 'region_code': 'WA', 'as_org': 'Datacamp Limited', 'location': {'lat': 47.6109, 'lon': -122.3303}, 'country_name': 'United States', 'country_code3': 'US', 'dma_code': 819, 'ip': '156.146.51.217', 'region_name': 'Washington', 'latitude': 47.6109, 'asn': 212238}


cli


{'severity': 3, 'signature_id': 2101447, 'metadata': {'signature_severity': ['Informational'], 'created_at': ['2010_09_23'], 'updated_at': ['2024_03_08'], 'confidence': ['Medium']}, 'category': 'Generic Protocol Command Decode', 'cve_id': 'CVE-2001-0540', 'signature': 'GPL INFO MS Remote Desktop Request RDP', 'action': 'allowed', 'gid': 1, 'rev': 15}

{'country_code2': 'US', 'timezone': 'America/Chicago', 'location': {'lon': -97.822, 'lat': 37.751}, 'ip': '112.196.222.60', 'latitude': 37.751, 'asn': 400342, 'continent_code': 'NA', 'country_code3': 'US', 'country_name': 'United States', 'longitude': -97.822, 'as_org': 'EDGENAT-CLOUD'}


{'postal_code': '86090', 'as_org': 'UNINET', 'country_code3': 'MX', 'latitude': 17.9776, 'asn': 8151, 'longitude': -92.9221, 'region_code': 'TAB', 'continent_code': 'NA', 'timezone': 'America/Mexico_City', 'ip': '189.230.100.92', 'country_code2': 'MX', 'city_name': 'Centro Municipality', 'location': {'lat': 17.9776, 'lon': -92.9221}, 'country_name': 'Mexico', 'region_name': 'Tabasco'}

srv


{'country_name': 'United States', 'longitude': -97.822, 'country_code2': 'US', 'ip': '173.249.158.10', 'latitude': 37.751, 'asn': 36444, 'timezone': 'America/Chicago', 'as_org': 'NEXCESS-NET', 'country_code3': 'US', 'continent_code': 'NA', 'location': {'lon': -97.822, 'lat': 37.751}}

{'tcp_flags_tc': '1b', 'tcp_flags': '1b', 'ts_max_regions': 1, 'tc_max_regions': 1, 'fin': True, 'psh': True, 'syn': True, 'state': 'closed', 'tcp_flags_ts': '1b', 'ack': True}


{'state': 'closed', 'psh': True, 'tcp_flags_ts': '1b', 'tcp_flags_tc': '1b', 'ack': True, 'ts_max_regions': 1, 'tc_max_regions': 1, 'fin': True, 'tcp_flags': '1b', 'syn': True}


{'continent_code': 'EU', 'country_code3': 'DE', 'longitude': 9.491, 'ip': '89.163.204.62', 'country_name': 'Germany', 'timezone': 'Europe/Berlin', 'as_org': 'WIIT AG', 'asn': 24961, 'country_code2': 'DE', 'location': {'lon': 9.491, 'lat': 51.2993}, 'latitude': 51.2993}

{'server': {'software_version': 'OpenSSH_7.9p1', 'proto_version': '2.0'}}


{'country_code3': 'CN', 'city_name': 'Xiamen', 'latitude': 24.4793, 'asn': 4837, 'timezone': 'Asia/Shanghai', 'longitude': 118.0673, 'as_org': 'CHINA UNICOM China169 Backbone', 'continent_code': 'AS', 'region_name': 'Fujian', 'ip': '58.23.144.125', 'country_code2': 'CN', 'region_code': 'FJ', 'country_name': 'China', 'location': {'lon': 118.0673, 'lat': 24.4793}}


{'signature': 'ET INFO SSH-2.0-Go version string Observed in Network Traffic', 'category': 'Misc activity', 'severity': 3, 'rev': 1, 'metadata': {'performance_impact': ['Low'], 'signature_severity': ['Informational'], 'updated_at': ['2022_09_23'], 'affected_product': ['Any'], 'tag': ['Description_Generated_By_Proofpoint_Nexus'], 'deployment': ['Internal', 'Perimeter'], 'attack_target': ['Client_and_Server'], 'confidence': ['High'], 'created_at': ['2022_09_23']}, 'signature_id': 2038967, 'action': 'allowed', 'gid': 1}

{'continent_code': 'EU', 'country_code3': 'GB', 'location': {'lat': 51.4964, 'lon': -0.1224}, 'country_name': 'United Kingdom', 'timezone': 'Europe/London', 'ip': '213.165.90.65', 'asn': 8560, 'latitude': 51.4964, 'as_org': 'IONOS SE', 'longitude': -0.1224, 'country_code2': 'GB'}


{'latitude': 52.2986, 'country_code2': 'NL', 'longitude': 4.9728, 'timezone': 'Europe/Amsterdam', 'country_name': 'The Netherlands', 'as_org': 'NYBULA', 'continent_code': 'EU', 'asn': 401116, 'city_name': 'Amsterdam', 'country_code3': 'NL', 'region_code': 'NH', 'ip': '196.251.115.97', 'location': {'lat': 52.2986, 'lon': 4.9728}, 'postal_code': '1106', 'region_name': 'North Holland'}


{'timezone': 'America/Chicago', 'ip': '167.248.133.116', 'asn': 398324, 'longitude': -97.822, 'location': {'lon': -97.822, 'lat': 37.751}, 'country_code2': 'US', 'latitude': 37.751, 'as_org': 'CENSYS-ARIN-01', 'country_name': 'United States', 'country_code3': 'US', 'continent_code': 'NA'}

cli

20345 days 23 hrs 56 min (modulo 49710 days)


{'location': {'lat': 42.696, 'lon': 23.332}, 'longitude': 23.332, 'as_org': 'Dm Auto Eood', 'latitude': 42.696, 'timezone': 'Europe/Sofia', 'continent_code': 'EU', 'country_name': 'Bulgaria', 'ip': '79.124.62.122', 'country_code2': 'BG', 'asn': 207812, 'country_code3': 'BG'}

cli


{'length': 0, 'protocol': 'HTTP/1.1', 'http_port': 3128, 'http_method': 'GET', 'hostname': '71.142.174.168', 'url': '/', 'http_user_agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246'}


{'continent_code': 'EU', 'location': {'lat': 52.2394, 'lon': 21.0362}, 'country_code2': 'PL', 'latitude': 52.2394, 'country_name': 'Poland', 'country_code3': 'PL', 'ip': '95.214.53.196', 'timezone': 'Europe/Warsaw', 'asn': 201814, 'as_org': 'MEVSPACE sp. z o.o.', 'longitude': 21.0362}

{'ack': True, 'tcp_flags': '16', 'tcp_flags_tc': '12', 'ts_max_regions': 1, 'syn': True, 'tc_max_regions': 1, 'rst': True, 'tcp_flags_ts': '06', 'state': 'closed'}


{'asn': 15802, 'country_name': 'United Arab Emirates', 'location': {'lat': 25.0734, 'lon': 55.2979}, 'longitude': 55.2979, 'ip': '87.200.80.161', 'latitude': 25.0734, 'region_name': 'Dubai', 'as_org': 'Emirates Integrated Telecommunications Company PJSC', 'city_name': 'Dubai', 'region_code': 'DU', 'continent_code': 'AS', 'country_code3': 'AE', 'country_code2': 'AE', 'timezone': 'Asia/Dubai'}

{'hostname': '71.142.174.168', 'http_port': 10002, 'protocol': 'HTTP/1.1', 'http_method': 'POST', 'url': '/_search/scroll', 'http_user_agent': 'elasticsearch-py/8.0.0 (Python/3.12.2; elastic-transport/8.17.1)', 'status': 200, 'http_content_type': 'application/vnd.elasticsearch+json', 'length': 2601}


{'timezone': 'Europe/Helsinki', 'postal_code': '00191', 'longitude': 24.9347, 'city_name': 'Helsinki', 'continent_code': 'EU', 'country_code2': 'FI', 'region_code': '18', 'as_org': 'Hetzner Online GmbH', 'location': {'lat': 60.1719, 'lon': 24.9347}, 'country_name': 'Finland', 'country_code3': 'FI', 'region_name': 'Uusimaa', 'ip': '95.216.15.123', 'latitude': 60.1719, 'asn': 24940}

cli


{'region_name': 'Uusimaa', 'latitude': 60.1719, 'timezone': 'Europe/Helsinki', 'country_code2': 'FI', 'country_code3': 'FI', 'city_name': 'Helsinki', 'region_code': '18', 'country_name': 'Finland', 'postal_code': '00191', 'asn': 24940, 'location': {'lon': 24.9347, 'lat': 60.1719}, 'continent_code': 'EU', 'as_org': 'Hetzner Online GmbH', 'longitude': 24.9347, 'ip': '95.217.198.93'}

cli


{'country_name': 'India', 'continent_code': 'AS', 'latitude': 21.9974, 'timezone': 'Asia/Kolkata', 'longitude': 79.0011, 'country_code3': 'IN', 'as_org': 'INDINET SERVICE PRIVATE LIMITED', 'asn': 132115, 'country_code2': 'IN', 'location': {'lat': 21.9974, 'lon': 79.0011}, 'ip': '150.129.176.226'}

cli


{'signature': 'ET INFO RDP connection request', 'metadata': {'created_at': ['2010_07_30'], 'signature_severity': ['Informational'], 'confidence': ['High'], 'updated_at': ['2024_03_07']}, 'category': 'Misc activity', 'gid': 1, 'rev': 10, 'signature_id': 2001329, 'severity': 3, 'action': 'allowed'}

{'longitude': 100.4045, 'as_org': 'TRUE INTERNET Co.,Ltd.', 'country_code3': 'TH', 'country_name': 'Thailand', 'city_name': 'Nonthaburi', 'timezone': 'Asia/Bangkok', 'latitude': 13.9062, 'asn': 7470, 'continent_code': 'AS', 'region_name': 'Nonthaburi', 'location': {'lat': 13.9062, 'lon': 100.4045}, 'postal_code': '11110', 'country_code2': 'TH', 'region_code': '12', 'ip': '61.91.163.146'}


{'location': {'lon': 4.9728, 'lat': 52.2986}, 'latitude': 52.2986, 'longitude': 4.9728, 'region_code': 'NH', 'country_name': 'The Netherlands', 'ip': '196.251.92.134', 'region_name': 'North Holland', 'timezone': 'Europe/Amsterdam', 'as_org': 'ZHONGGUANCUN-CO', 'postal_code': '1106', 'asn': 401109, 'city_name': 'Amsterdam', 'country_code2': 'NL', 'continent_code': 'EU', 'country_code3': 'NL'}

srv


{'latitude': 38.6879, 'country_code2': 'US', 'longitude': -77.2978, 'timezone': 'America/New_York', 'country_name': 'United States', 'as_org': 'OVH SAS', 'continent_code': 'NA', 'asn': 16276, 'country_code3': 'US', 'region_code': 'VA', 'ip': '147.135.31.115', 'location': {'lat': 38.6879, 'lon': -77.2978}, 'region_name': 'Virginia'}

{'ack': True, 'tc_max_regions': 1, 'tcp_flags': '12', 'ts_max_regions': 1, 'syn': True, 'tcp_flags_tc': '12', 'tcp_flags_ts': '02', 'state': 'syn_recv'}


{'city_name': 'Amsterdam', 'timezone': 'Europe/Amsterdam', 'region_name': 'North Holland', 'ip': '196.251.66.163', 'asn': 401116, 'longitude': 4.9728, 'postal_code': '1106', 'country_code2': 'NL', 'location': {'lon': 4.9728, 'lat': 52.2986}, 'latitude': 52.2986, 'country_name': 'The Netherlands', 'region_code': 'NH', 'as_org': 'NYBULA', 'country_code3': 'NL', 'continent_code': 'EU'}

cli