{"time":"2026-05-01T17:01:45.561454255Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T17:03:15.402085707Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T17:08:57.229083122Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T17:55:48.533870811Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T17:56:51.817868394Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T18:24:44.928670081Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T18:28:06.27744075Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T19:05:05.609574769Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T19:19:18.190418262Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T19:34:23.806263846Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-01T21:32:03.077839832Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-02T03:56:07.104641526Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-02T06:32:54.773641566Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-02T06:54:39.56030931Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-02T07:33:27.209164457Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-02T07:48:10.11821248Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-02T14:46:00.124749058Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-02T15:20:48.281498351Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-03T10:05:55.112875708Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-03T11:13:56.264688044Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-03T19:30:34.965322083Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-04T15:39:02.765506998Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-09T11:25:07.853169158Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-11T17:06:25.429686662Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-12T14:04:43.134145952Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-13T19:32:34.132933832Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-13T20:30:13.438928734Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-15T15:35:51.92386889Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-16T11:26:30.651925096Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-16T13:16:07.949028605Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-16T19:33:23.370951698Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4EW7HKDBFY1AJW54H1QRF"}
{"time":"2026-05-16T19:33:23.371773657Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":1,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4EW7HKDBFY1AJW54H1QRF"}
{"time":"2026-05-16T19:33:24.870826426Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4EXQE3H8V6PN90MMJA76P"}
{"time":"2026-05-16T19:33:24.871029504Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":2,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4EXQE3H8V6PN90MMJA76P"}
{"time":"2026-05-16T19:33:25.169935775Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4EXYPK7FHEP2ZW4GJ6FTN"}
{"time":"2026-05-16T19:33:25.17081046Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":3,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4EXYPK7FHEP2ZW4GJ6FTN"}
{"time":"2026-05-16T19:37:50.505361399Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4Q153XZB6TBQ3FCQSCVYP"}
{"time":"2026-05-16T19:37:50.506170405Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":4,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4Q153XZB6TBQ3FCQSCVYP"}
{"time":"2026-05-16T19:37:52.504988089Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4Q30MRJP245NF9FGZ8CZJ"}
{"time":"2026-05-16T19:37:52.505489851Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":5,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4Q30MRJP245NF9FGZ8CZJ"}
{"time":"2026-05-16T19:37:52.706194307Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4Q37VRADSPRZQXWRR5JKM"}
{"time":"2026-05-16T19:37:52.706417099Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":6,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4Q37VRADSPRZQXWRR5JKM"}
{"time":"2026-05-16T19:38:37.30421795Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4RETM1PHTDT6K8GZ5XPCP"}
{"time":"2026-05-16T19:38:37.305989283Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":4,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4RETM1PHTDT6K8GZ5XPCP"}
{"time":"2026-05-16T19:39:31.00561495Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS4T389N0MF0WACGN1KYFGV"}
{"time":"2026-05-16T19:39:31.006179694Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":5,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4T389N0MF0WACGN1KYFGV"}
{"time":"2026-05-16T19:39:31.204521254Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4T3FHNSND5030KBX6HD1T"}
{"time":"2026-05-16T19:39:31.204754756Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":6,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4T3FHNSND5030KBX6HD1T"}
{"time":"2026-05-16T19:39:57.005396181Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"high","weight":3,"service":"threat-intel","correlation_id":"01KRS4TWKGZ0Y59FSDVMYFAXQJ"}
{"time":"2026-05-16T19:39:57.00573205Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":9,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4TWKGZ0Y59FSDVMYFAXQJ"}
{"time":"2026-05-16T19:39:57.505255427Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4TX5XRZSFY31PYTGJ46FP"}
{"time":"2026-05-16T19:39:57.505578426Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":10,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4TX5XRZSFY31PYTGJ46FP"}
{"time":"2026-05-16T19:40:25.205094009Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"high","weight":3,"service":"threat-intel","correlation_id":"01KRS4VR560S2G9B7YJ4CBVTQK"}
{"time":"2026-05-16T19:40:25.20643849Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":13,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4VR560S2G9B7YJ4CBVTQK"}
{"time":"2026-05-16T19:40:25.405794698Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4VRCJTG8TD6NJ2PE9AG9X"}
{"time":"2026-05-16T19:40:25.406061418Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":14,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4VRCJTG8TD6NJ2PE9AG9X"}
{"time":"2026-05-16T19:40:28.004557362Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4VTXJMQPXZHBDGVW9KYV7"}
{"time":"2026-05-16T19:40:28.006679679Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":1,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4VTXJMQPXZHBDGVW9KYV7"}
{"time":"2026-05-16T19:41:35.705570256Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS4XX1MK5984587T8XH8QNV"}
{"time":"2026-05-16T19:41:35.706721282Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":15,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4XX1MK5984587T8XH8QNV"}
{"time":"2026-05-16T19:41:36.01121195Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"challenge","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS4XXB4YW5N15SWTV5WW0N2"}
{"time":"2026-05-16T19:41:36.011697803Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":16,"threshold":15,"service":"threat-intel","correlation_id":"01KRS4XXB4YW5N15SWTV5WW0N2"}
{"time":"2026-05-16T19:41:36.018398915Z","level":"WARN","msg":"ip auto-blacklisted","source_ip":"166.88.120.5","score":16,"service":"threat-intel","correlation_id":"01KRS4XXB4YW5N15SWTV5WW0N2"}
{"time":"2026-05-16T19:43:19.504640983Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS512BM5DJFMB81W2HS5G8E"}
{"time":"2026-05-16T19:43:19.505813857Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":14,"threshold":15,"service":"threat-intel","correlation_id":"01KRS512BM5DJFMB81W2HS5G8E"}
{"time":"2026-05-16T19:43:19.70545236Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS512JXSB2Z8KMRM7BTZR6H"}
{"time":"2026-05-16T19:43:19.706062307Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":15,"threshold":15,"service":"threat-intel","correlation_id":"01KRS512JXSB2Z8KMRM7BTZR6H"}
{"time":"2026-05-16T19:43:52.306295262Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS522F5RR00W61Q7V9W40CG"}
{"time":"2026-05-16T19:43:52.30652787Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":1,"threshold":15,"service":"threat-intel","correlation_id":"01KRS522F5RR00W61Q7V9W40CG"}
{"time":"2026-05-16T19:43:56.404811077Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS526FAW7YRN1R56FSRT2S3"}
{"time":"2026-05-16T19:43:56.405911025Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":2,"threshold":15,"service":"threat-intel","correlation_id":"01KRS526FAW7YRN1R56FSRT2S3"}
{"time":"2026-05-16T19:43:56.805075923Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS526RZ38T6QQGYZWR9MKE2"}
{"time":"2026-05-16T19:43:56.805435652Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":3,"threshold":15,"service":"threat-intel","correlation_id":"01KRS526RZ38T6QQGYZWR9MKE2"}
{"time":"2026-05-16T19:43:57.304960856Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52790MY9X5D1DXCQT2T9H"}
{"time":"2026-05-16T19:43:57.305732156Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":15,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52790MY9X5D1DXCQT2T9H"}
{"time":"2026-05-16T19:43:57.605529199Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS527J7BNBCFJMYN19AEPJZ"}
{"time":"2026-05-16T19:43:57.605934856Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":16,"threshold":15,"service":"threat-intel","correlation_id":"01KRS527J7BNBCFJMYN19AEPJZ"}
{"time":"2026-05-16T19:43:58.205937219Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS5286CJ0TT154ZH13R62MY"}
{"time":"2026-05-16T19:43:58.2062516Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":2,"threshold":15,"service":"threat-intel","correlation_id":"01KRS5286CJ0TT154ZH13R62MY"}
{"time":"2026-05-16T19:43:58.506198499Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS528G3DVA2NNK3NM13M62V"}
{"time":"2026-05-16T19:43:58.506520718Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":3,"threshold":15,"service":"threat-intel","correlation_id":"01KRS528G3DVA2NNK3NM13M62V"}
{"time":"2026-05-16T19:43:59.905298148Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS529WQFSBE1D87E0NPSDYK"}
{"time":"2026-05-16T19:43:59.905465624Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":4,"threshold":15,"service":"threat-intel","correlation_id":"01KRS529WQFSBE1D87E0NPSDYK"}
{"time":"2026-05-16T19:44:00.2054993Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52A5Y3JYXQWRWBZR5RM3Z"}
{"time":"2026-05-16T19:44:00.206121173Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":5,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52A5Y3JYXQWRWBZR5RM3Z"}
{"time":"2026-05-16T19:44:01.10631416Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52B2C5NPY7QFCRY7SEGFF"}
{"time":"2026-05-16T19:44:01.106861266Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":6,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52B2C5NPY7QFCRY7SEGFF"}
{"time":"2026-05-16T19:44:01.505857171Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52BBW6FND52MWHQNMZ42Z"}
{"time":"2026-05-16T19:44:01.506462188Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":7,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52BBW6FND52MWHQNMZ42Z"}
{"time":"2026-05-16T19:44:02.205319434Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52C3S6CMB0KJPF0KFB28B"}
{"time":"2026-05-16T19:44:02.206579213Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":8,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52C3S6CMB0KJPF0KFB28B"}
{"time":"2026-05-16T19:44:02.306515749Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52C5AVFRXRZ0GBDP308B9"}
{"time":"2026-05-16T19:44:02.307175141Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":17,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52C5AVFRXRZ0GBDP308B9"}
{"time":"2026-05-16T19:44:02.505897467Z","level":"INFO","msg":"processing threat event","source_ip":"166.88.120.5","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52CC85147JQEKF1Z43FK0"}
{"time":"2026-05-16T19:44:02.506134345Z","level":"INFO","msg":"ip threat score","source_ip":"166.88.120.5","score":18,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52CC85147JQEKF1Z43FK0"}
{"time":"2026-05-16T19:44:02.507646289Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52CD3CZWHBXV4MCRFGG7P"}
{"time":"2026-05-16T19:44:02.507951978Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":9,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52CD3CZWHBXV4MCRFGG7P"}
{"time":"2026-05-16T19:44:03.005858654Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52CXM0K9N8GEBR92Z3TB3"}
{"time":"2026-05-16T19:44:03.006091638Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":10,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52CXM0K9N8GEBR92Z3TB3"}
{"time":"2026-05-16T19:44:03.305029538Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52D6S61KNAX8Q8Y2MQ4D5"}
{"time":"2026-05-16T19:44:03.305993222Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":11,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52D6S61KNAX8Q8Y2MQ4D5"}
{"time":"2026-05-16T19:44:03.904549896Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52DQ8WMSN2DQG82DTKB6Y"}
{"time":"2026-05-16T19:44:03.904990857Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":12,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52DQ8WMSN2DQG82DTKB6Y"}
{"time":"2026-05-16T19:44:04.005626792Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52DWHK108N4K68PM3XN9V"}
{"time":"2026-05-16T19:44:04.006064086Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":4,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52DWHK108N4K68PM3XN9V"}
{"time":"2026-05-16T19:44:04.205767518Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52E0MSAY1T5GR3T4Y6SQ8"}
{"time":"2026-05-16T19:44:04.206098655Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":13,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52E0MSAY1T5GR3T4Y6SQ8"}
{"time":"2026-05-16T19:44:04.306315762Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52E55BTJPYRRAN3PWRFQ1"}
{"time":"2026-05-16T19:44:04.307334694Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":5,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52E55BTJPYRRAN3PWRFQ1"}
{"time":"2026-05-16T19:44:06.606251938Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52GCPQP6YC19M2K4JQMK2"}
{"time":"2026-05-16T19:44:06.606508962Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":6,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52GCPQP6YC19M2K4JQMK2"}
{"time":"2026-05-16T19:44:06.905707029Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52GN8F0FEG2P9GG3HNBSN"}
{"time":"2026-05-16T19:44:06.906092234Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":7,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52GN8F0FEG2P9GG3HNBSN"}
{"time":"2026-05-16T19:44:12.206475382Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52NX2KXCWGG7XJNQHHYNS"}
{"time":"2026-05-16T19:44:12.206680271Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":14,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52NX2KXCWGG7XJNQHHYNS"}
{"time":"2026-05-16T19:44:12.504601938Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52P694M5F3SCMYH6ECFWG"}
{"time":"2026-05-16T19:44:12.5050531Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":15,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52P694M5F3SCMYH6ECFWG"}
{"time":"2026-05-16T19:44:14.404993925Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52R1TX5Y53P8SKB89WB8P"}
{"time":"2026-05-16T19:44:14.405544566Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":16,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52R1TX5Y53P8SKB89WB8P"}
{"time":"2026-05-16T19:44:14.410103111Z","level":"WARN","msg":"ip auto-blacklisted","source_ip":"108.165.68.10","score":16,"service":"threat-intel","correlation_id":"01KRS52R1TX5Y53P8SKB89WB8P"}
{"time":"2026-05-16T19:44:14.805176651Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52RC5J7NKDMBED8G4ZQ0H"}
{"time":"2026-05-16T19:44:14.805459897Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":17,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52RC5J7NKDMBED8G4ZQ0H"}
{"time":"2026-05-16T19:44:21.204147755Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS52YN8YX1FYC0KAAY0W6WX"}
{"time":"2026-05-16T19:44:21.20444852Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":18,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52YN8YX1FYC0KAAY0W6WX"}
{"time":"2026-05-16T19:44:21.504797364Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS52YYF4HNTK76B3J676723"}
{"time":"2026-05-16T19:44:21.507449219Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":19,"threshold":15,"service":"threat-intel","correlation_id":"01KRS52YYF4HNTK76B3J676723"}
{"time":"2026-05-16T19:45:22.10454137Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRS54T4P15H8BZA92G2M39K8"}
{"time":"2026-05-16T19:45:22.105077857Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":20,"threshold":15,"service":"threat-intel","correlation_id":"01KRS54T4P15H8BZA92G2M39K8"}
{"time":"2026-05-16T19:45:22.40509264Z","level":"INFO","msg":"processing threat event","source_ip":"108.165.68.10","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRS54TEMSHN9333YNM3EWJ7A"}
{"time":"2026-05-16T19:45:22.405290761Z","level":"INFO","msg":"ip threat score","source_ip":"108.165.68.10","score":21,"threshold":15,"service":"threat-intel","correlation_id":"01KRS54TEMSHN9333YNM3EWJ7A"}
{"time":"2026-05-16T19:46:40.421104433Z","level":"ERROR","msg":"messaging consumer stopped","backend":"redis","error":"xreadgroup: NOGROUP No such key 'waf:stream:threats' or consumer group 'threat-intel-service' in XREADGROUP with GROUP option","service":"threat-intel"}
{"time":"2026-05-16T20:50:51.535374971Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-16T20:59:34.542865851Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-16T21:30:31.954031859Z","level":"INFO","msg":"threat-intel service started","threshold":15,"window_minutes":5,"service":"threat-intel"}
{"time":"2026-05-16T21:37:22.449073739Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRSBHWY7RRPA47Q1YW1CZBQQ"}
{"time":"2026-05-16T21:37:22.450072592Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":1,"threshold":15,"service":"threat-intel","correlation_id":"01KRSBHWY7RRPA47Q1YW1CZBQQ"}
{"time":"2026-05-16T21:37:22.647375674Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRSBHX4X2DXEYFPXX9C4725M"}
{"time":"2026-05-16T21:37:22.64764816Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":2,"threshold":15,"service":"threat-intel","correlation_id":"01KRSBHX4X2DXEYFPXX9C4725M"}
{"time":"2026-05-16T21:38:34.84718568Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRSBM3MK5WYKZ9SRQ6WKVAGR"}
{"time":"2026-05-16T21:38:34.848272073Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":3,"threshold":15,"service":"threat-intel","correlation_id":"01KRSBM3MK5WYKZ9SRQ6WKVAGR"}
{"time":"2026-05-16T21:38:42.446548794Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"medium","weight":1,"service":"threat-intel","correlation_id":"01KRSBMB1X8T31F8YFM215WGSY"}
{"time":"2026-05-16T21:38:42.447205477Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":4,"threshold":15,"service":"threat-intel","correlation_id":"01KRSBMB1X8T31F8YFM215WGSY"}
{"time":"2026-05-16T21:38:42.645698135Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRSBMBAHR69BFSDBVRV3WXBV"}
{"time":"2026-05-16T21:38:42.646136633Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":5,"threshold":15,"service":"threat-intel","correlation_id":"01KRSBMBAHR69BFSDBVRV3WXBV"}
{"time":"2026-05-16T21:54:26.047023409Z","level":"INFO","msg":"processing threat event","source_ip":"168.93.213.85","action":"block","tier":"catchall","weight":1,"service":"threat-intel","correlation_id":"01KRSCH4HWM9WQQ5MSQYK5A4JT"}
{"time":"2026-05-16T21:54:26.047731952Z","level":"INFO","msg":"ip threat score","source_ip":"168.93.213.85","score":1,"threshold":15,"service":"threat-intel","correlation_id":"01KRSCH4HWM9WQQ5MSQYK5A4JT"}