{"ip":"194.88.204.44","exported_at":"2026-06-18T17:12:26+00:00","period_days":30,"metrics":{"events7d":0,"distinct_ports":0,"distinct_classifications":0,"max_severity":null,"last_sensor_id":"paris-1","max_waf_score":null,"max_risk_score":86,"attack_stage":null,"attack_chain_stage":null,"threat_family":[],"recommended_action":null,"confidence":null,"risk_breakdown":[],"mitre_tactics":[],"mitre_technique":null,"top_mitre_technique":null,"top_mitre_count":null,"executive_one_liner_fr":"risque 86\/100","campaign_hint_fr":null,"confidence_breakdown":[],"persona_hostname":null,"correlation_flags":[],"correlation_flags_labels_fr":[],"confidence_pct":null,"confidence_hint_fr":null,"sensor_role_label_fr":null,"tags_summary_labels_fr":[],"tags_summary":[],"attack_vector":null,"protocol_details":[],"protocol_summary_fr":null,"evidence_snippet":null,"target_port_label":null,"emulator_service":null,"confidence_reason":null,"classification_reason":null,"classification_reason_label_fr":null,"confidence_factors_fr":null,"payload_preview":null},"events":[{"id":7948686,"ip":"194.88.204.44","ts":"2026-05-29 17:59:28.000000","proto":"tcp","src_port":55280,"dst_port":23,"service":"telnet","classification":"bruteforce","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 1, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 86, \u0022campaign_key\u0022: \u00229e23e412474737c3bb89ba68c4163fdcf6e1fc89\u0022, \u0022event_fingerprint\u0022: \u00223c4918f314eddc8d1c8db5a7475100375f14b781\u0022, \u0022tags_list\u0022: [\u0022net_bruteforce\u0022]}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[\u0022net_bruteforce\u0022]","anomalies":"[]","severity":7,"bytes_in":0},{"id":7948684,"ip":"194.88.204.44","ts":"2026-05-29 17:59:25.000000","proto":"tcp","src_port":55276,"dst_port":23,"service":"telnet","classification":"bruteforce","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 1, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 86, \u0022campaign_key\u0022: \u00229e23e412474737c3bb89ba68c4163fdcf6e1fc89\u0022, \u0022event_fingerprint\u0022: \u00223c4918f314eddc8d1c8db5a7475100375f14b781\u0022, \u0022tags_list\u0022: [\u0022net_bruteforce\u0022]}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[\u0022net_bruteforce\u0022]","anomalies":"[]","severity":7,"bytes_in":0},{"id":7948681,"ip":"194.88.204.44","ts":"2026-05-29 17:59:22.000000","proto":"tcp","src_port":55268,"dst_port":23,"service":"telnet","classification":"bruteforce","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 1, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 86, \u0022campaign_key\u0022: \u00229e23e412474737c3bb89ba68c4163fdcf6e1fc89\u0022, \u0022event_fingerprint\u0022: \u00223c4918f314eddc8d1c8db5a7475100375f14b781\u0022, \u0022tags_list\u0022: [\u0022net_bruteforce\u0022]}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[\u0022net_bruteforce\u0022]","anomalies":"[]","severity":7,"bytes_in":0},{"id":7948675,"ip":"194.88.204.44","ts":"2026-05-29 17:59:19.000000","proto":"tcp","src_port":55246,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7948673,"ip":"194.88.204.44","ts":"2026-05-29 17:59:16.000000","proto":"tcp","src_port":55240,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7948672,"ip":"194.88.204.44","ts":"2026-05-29 17:59:13.000000","proto":"tcp","src_port":55237,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7948671,"ip":"194.88.204.44","ts":"2026-05-29 17:59:10.000000","proto":"tcp","src_port":55224,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7948669,"ip":"194.88.204.44","ts":"2026-05-29 17:59:07.000000","proto":"tcp","src_port":55219,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7948668,"ip":"194.88.204.44","ts":"2026-05-29 17:59:03.000000","proto":"tcp","src_port":55213,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7948664,"ip":"194.88.204.44","ts":"2026-05-29 17:59:00.000000","proto":"tcp","src_port":55203,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775680,"ip":"194.88.204.44","ts":"2026-05-27 04:39:37.000000","proto":"tcp","src_port":55507,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775679,"ip":"194.88.204.44","ts":"2026-05-27 04:39:34.000000","proto":"tcp","src_port":55503,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775677,"ip":"194.88.204.44","ts":"2026-05-27 04:39:31.000000","proto":"tcp","src_port":55496,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775676,"ip":"194.88.204.44","ts":"2026-05-27 04:39:27.000000","proto":"tcp","src_port":55489,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775671,"ip":"194.88.204.44","ts":"2026-05-27 04:39:24.000000","proto":"tcp","src_port":55472,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775670,"ip":"194.88.204.44","ts":"2026-05-27 04:39:21.000000","proto":"tcp","src_port":55459,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775669,"ip":"194.88.204.44","ts":"2026-05-27 04:39:18.000000","proto":"tcp","src_port":55453,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775668,"ip":"194.88.204.44","ts":"2026-05-27 04:39:15.000000","proto":"tcp","src_port":55445,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775666,"ip":"194.88.204.44","ts":"2026-05-27 04:39:12.000000","proto":"tcp","src_port":55431,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7775664,"ip":"194.88.204.44","ts":"2026-05-27 04:39:08.000000","proto":"tcp","src_port":55427,"dst_port":2323,"service":null,"classification":"port_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022registered\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: null, \u0022app_proto\u0022: null, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00220a9b74886e486ba4acbe70b57f1ae28f3c04d198\u0022, \u0022event_fingerprint\u0022: \u00228363142c9798ea7690238f7a7bcb010f142371b5\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7524380,"ip":"194.88.204.44","ts":"2026-05-22 15:26:56.000000","proto":"tcp","src_port":39823,"dst_port":23,"service":"telnet","classification":"bruteforce","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 1, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 86, \u0022campaign_key\u0022: \u00229e23e412474737c3bb89ba68c4163fdcf6e1fc89\u0022, \u0022event_fingerprint\u0022: \u00223c4918f314eddc8d1c8db5a7475100375f14b781\u0022, \u0022tags_list\u0022: [\u0022net_bruteforce\u0022]}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[\u0022net_bruteforce\u0022]","anomalies":"[]","severity":7,"bytes_in":0},{"id":7524378,"ip":"194.88.204.44","ts":"2026-05-22 15:26:53.000000","proto":"tcp","src_port":39818,"dst_port":23,"service":"telnet","classification":"bruteforce","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 1, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 86, \u0022campaign_key\u0022: \u00229e23e412474737c3bb89ba68c4163fdcf6e1fc89\u0022, \u0022event_fingerprint\u0022: \u00223c4918f314eddc8d1c8db5a7475100375f14b781\u0022, \u0022tags_list\u0022: [\u0022net_bruteforce\u0022]}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[\u0022net_bruteforce\u0022]","anomalies":"[]","severity":7,"bytes_in":0},{"id":7524377,"ip":"194.88.204.44","ts":"2026-05-22 15:26:50.000000","proto":"tcp","src_port":39813,"dst_port":23,"service":"telnet","classification":"bruteforce","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 1, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 86, \u0022campaign_key\u0022: \u00229e23e412474737c3bb89ba68c4163fdcf6e1fc89\u0022, \u0022event_fingerprint\u0022: \u00223c4918f314eddc8d1c8db5a7475100375f14b781\u0022, \u0022tags_list\u0022: [\u0022net_bruteforce\u0022]}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[\u0022net_bruteforce\u0022]","anomalies":"[]","severity":7,"bytes_in":0},{"id":7524374,"ip":"194.88.204.44","ts":"2026-05-22 15:26:47.000000","proto":"tcp","src_port":39812,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7524363,"ip":"194.88.204.44","ts":"2026-05-22 15:26:44.000000","proto":"tcp","src_port":39810,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7524361,"ip":"194.88.204.44","ts":"2026-05-22 15:26:41.000000","proto":"tcp","src_port":39805,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7524360,"ip":"194.88.204.44","ts":"2026-05-22 15:26:38.000000","proto":"tcp","src_port":39794,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7524357,"ip":"194.88.204.44","ts":"2026-05-22 15:26:34.000000","proto":"tcp","src_port":39785,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7524356,"ip":"194.88.204.44","ts":"2026-05-22 15:26:31.000000","proto":"tcp","src_port":39777,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0},{"id":7524355,"ip":"194.88.204.44","ts":"2026-05-22 15:26:28.000000","proto":"tcp","src_port":39775,"dst_port":23,"service":"telnet","classification":"telnet_attack","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 0, \u0022payload_entropy\u0022: 0.0, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022Ooo Migraph\u0022, \u0022service\u0022: \u0022telnet\u0022, \u0022app_proto\u0022: \u0022telnet\u0022, \u0022asn\u0022: 35640, \u0022country\u0022: \u0022RU\u0022, \u0022tag_count\u0022: 0, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 72, \u0022campaign_key\u0022: \u00221a301a88f8ba8fc0418adc73aa4a4d2d582a92f6\u0022, \u0022event_fingerprint\u0022: \u002234f2e435537d843468a1ab7e24b205a446661b9d\u0022}","tls_sni":null,"tls_ja3_hash":null,"tls_ja3":null,"http_version":null,"http_host":null,"http_user_agent":null,"http_referer":null,"tags":"[]","anomalies":"[]","severity":6,"bytes_in":0}],"total_events":30}