2023-04-21 13:25:09 +00:00
|
|
|
{
|
2023-12-14 14:30:15 +00:00
|
|
|
"Event": {
|
|
|
|
|
"analysis": "2",
|
|
|
|
|
"date": "2020-02-25",
|
|
|
|
|
"extends_uuid": "",
|
|
|
|
|
"info": "Linux/Mirai-Fbot - New variant with strong infection spreading rate",
|
|
|
|
|
"publish_timestamp": "1587123232",
|
|
|
|
|
"published": true,
|
|
|
|
|
"threat_level_id": "3",
|
|
|
|
|
"timestamp": "1587123147",
|
|
|
|
|
"uuid": "5e54ef58-004c-4acd-b0d6-967a950d210f",
|
|
|
|
|
"Orgc": {
|
|
|
|
|
"name": "MalwareMustDie",
|
|
|
|
|
"uuid": "569e04b2-efd0-45bd-b83a-4f7b950d210f"
|
|
|
|
|
},
|
|
|
|
|
"Tag": [
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ffffff",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "tlp:white",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#22681c",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "malware_classification:malware-category=\"Botnet\"",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#3a7300",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ff0000",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "Mirai",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Internal reference",
|
|
|
|
|
"comment": "Analysis and infection alert information",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1582624672",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5e54efa0-ee20-4dc3-8cfd-4246950d210f",
|
|
|
|
|
"value": "https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-2d80-4821-a83f-bda5950d210f",
|
|
|
|
|
"value": "1.1.180.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-dac8-48ab-94f9-bda5950d210f",
|
|
|
|
|
"value": "1.11.157.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-44cc-4451-9cb2-bda5950d210f",
|
|
|
|
|
"value": "1.160.180.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-a74c-43c7-9268-bda5950d210f",
|
|
|
|
|
"value": "1.161.114.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-8534-4ba0-8d06-bda5950d210f",
|
|
|
|
|
"value": "1.161.122.100"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-1a88-409c-8095-bda5950d210f",
|
|
|
|
|
"value": "1.162.144.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-5ce4-43ec-a520-bda5950d210f",
|
|
|
|
|
"value": "1.162.144.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-9550-421d-a28a-bda5950d210f",
|
|
|
|
|
"value": "1.162.144.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-3758-4fa3-ae63-bda5950d210f",
|
|
|
|
|
"value": "1.162.221.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-1040-4307-a06c-bda5950d210f",
|
|
|
|
|
"value": "1.163.202.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-9628-491e-8e8d-bda5950d210f",
|
|
|
|
|
"value": "1.163.205.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-4614-4bf4-a886-bda5950d210f",
|
|
|
|
|
"value": "1.163.36.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-c980-4ff7-97a7-bda5950d210f",
|
|
|
|
|
"value": "1.163.52.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-5cb8-4573-9015-bda5950d210f",
|
|
|
|
|
"value": "1.165.163.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-b9a4-4e06-8fa9-bda5950d210f",
|
|
|
|
|
"value": "1.165.241.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-76cc-4658-8590-bda5950d210f",
|
|
|
|
|
"value": "1.165.88.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624842",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04a-eae8-4a35-978f-bda5950d210f",
|
|
|
|
|
"value": "1.169.244.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-c23c-48f3-8807-bda5950d210f",
|
|
|
|
|
"value": "1.169.72.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-bac4-4d03-9578-bda5950d210f",
|
|
|
|
|
"value": "1.170.89.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-1ecc-4495-84d3-bda5950d210f",
|
|
|
|
|
"value": "1.170.92.201"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-954c-4097-9a2a-bda5950d210f",
|
|
|
|
|
"value": "1.171.11.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-9f68-4667-a890-bda5950d210f",
|
|
|
|
|
"value": "1.172.190.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-03b8-4d3a-a85a-bda5950d210f",
|
|
|
|
|
"value": "1.172.52.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-c074-4566-bc0c-bda5950d210f",
|
|
|
|
|
"value": "1.173.108.121"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-a508-466f-8db8-bda5950d210f",
|
|
|
|
|
"value": "1.175.148.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-4584-4102-8733-bda5950d210f",
|
|
|
|
|
"value": "1.175.172.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-8844-4da7-82c5-bda5950d210f",
|
|
|
|
|
"value": "1.175.175.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-c094-4855-9c02-bda5950d210f",
|
|
|
|
|
"value": "1.175.211.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-452c-40a6-a01c-bda5950d210f",
|
|
|
|
|
"value": "1.175.254.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-d5cc-43d9-963c-bda5950d210f",
|
|
|
|
|
"value": "1.175.68.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-0f90-4a67-8c14-bda5950d210f",
|
|
|
|
|
"value": "1.175.71.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-b9b0-4670-92e0-bda5950d210f",
|
|
|
|
|
"value": "1.237.51.247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-d3c0-4fdd-839b-bda5950d210f",
|
|
|
|
|
"value": "1.241.4.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-e204-457a-a369-bda5950d210f",
|
|
|
|
|
"value": "1.34.130.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-d124-4a75-9d0e-bda5950d210f",
|
|
|
|
|
"value": "1.34.133.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-1ff0-4331-ab2f-bda5950d210f",
|
|
|
|
|
"value": "1.34.159.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-d83c-46c1-ad3e-bda5950d210f",
|
|
|
|
|
"value": "1.34.247.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-0470-45b8-a135-bda5950d210f",
|
|
|
|
|
"value": "1.36.17.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-a47c-4e79-b74a-bda5950d210f",
|
|
|
|
|
"value": "1.36.225.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-efa8-4215-8f8d-bda5950d210f",
|
|
|
|
|
"value": "1.52.16.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-854c-43d0-9948-bda5950d210f",
|
|
|
|
|
"value": "1.53.124.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-b85c-4bfe-ac6f-bda5950d210f",
|
|
|
|
|
"value": "1.59.105.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-8e34-4927-8bb5-bda5950d210f",
|
|
|
|
|
"value": "1.64.1.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-cd2c-4520-a023-bda5950d210f",
|
|
|
|
|
"value": "1.64.114.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-527c-47a8-8f0d-bda5950d210f",
|
|
|
|
|
"value": "1.64.255.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-6498-452c-a8d4-bda5950d210f",
|
|
|
|
|
"value": "1.65.135.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-02f8-46e0-bc46-bda5950d210f",
|
|
|
|
|
"value": "1.65.158.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-f2c4-4c37-827b-bda5950d210f",
|
|
|
|
|
"value": "1.65.165.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-5d28-4f4e-a010-bda5950d210f",
|
|
|
|
|
"value": "1.65.170.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-9b8c-4e6b-89c5-bda5950d210f",
|
|
|
|
|
"value": "1.65.184.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-e82c-429b-9cdf-bda5950d210f",
|
|
|
|
|
"value": "1.65.185.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-b7e8-44c1-bb84-bda5950d210f",
|
|
|
|
|
"value": "1.69.1.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-f3e0-4201-bdad-bda5950d210f",
|
|
|
|
|
"value": "103.204.221.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-3a40-4f51-ac2e-bda5950d210f",
|
|
|
|
|
"value": "103.207.58.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-11d4-447e-94dd-bda5950d210f",
|
|
|
|
|
"value": "103.236.193.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-cbb8-4870-b55e-bda5950d210f",
|
|
|
|
|
"value": "103.250.38.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-d0dc-43d3-a053-bda5950d210f",
|
|
|
|
|
"value": "103.91.180.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-6f68-46df-af40-bda5950d210f",
|
|
|
|
|
"value": "104.162.247.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-0898-4ccb-abc4-bda5950d210f",
|
|
|
|
|
"value": "105.139.66.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-0268-4d2e-9ae0-bda5950d210f",
|
|
|
|
|
"value": "106.0.37.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-4be8-43d9-8530-bda5950d210f",
|
|
|
|
|
"value": "106.105.174.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-d474-48f1-9fd9-bda5950d210f",
|
|
|
|
|
"value": "106.105.84.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-1318-4e40-8c34-bda5950d210f",
|
|
|
|
|
"value": "106.107.253.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-a970-4522-8b51-bda5950d210f",
|
|
|
|
|
"value": "106.253.202.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-c6f0-4b2f-bf7a-bda5950d210f",
|
|
|
|
|
"value": "106.51.127.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-7850-4110-8825-bda5950d210f",
|
|
|
|
|
"value": "108.221.169.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-6610-49fc-aca9-bda5950d210f",
|
|
|
|
|
"value": "109.111.172.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-cf5c-468b-9914-bda5950d210f",
|
|
|
|
|
"value": "109.200.234.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-eb24-4a72-a1d1-bda5950d210f",
|
|
|
|
|
"value": "109.241.235.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-1ec8-48ae-aef0-bda5950d210f",
|
|
|
|
|
"value": "109.248.241.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-0f3c-4fe2-b9cb-bda5950d210f",
|
|
|
|
|
"value": "109.248.241.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-683c-435d-b509-bda5950d210f",
|
|
|
|
|
"value": "109.248.241.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-1320-4551-948f-bda5950d210f",
|
|
|
|
|
"value": "109.248.241.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-0378-480f-a471-bda5950d210f",
|
|
|
|
|
"value": "109.248.241.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-b854-4f7d-adc9-bda5950d210f",
|
|
|
|
|
"value": "109.99.230.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-2704-49f8-9deb-bda5950d210f",
|
|
|
|
|
"value": "110.241.122.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-1640-4d31-9ee6-bda5950d210f",
|
|
|
|
|
"value": "110.47.211.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624843",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04b-70a8-4a8f-9e98-bda5950d210f",
|
|
|
|
|
"value": "111.125.140.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-2f9c-45fd-941f-bda5950d210f",
|
|
|
|
|
"value": "111.241.148.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-9bd0-4516-9622-bda5950d210f",
|
|
|
|
|
"value": "111.241.66.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-eec4-4093-b5f0-bda5950d210f",
|
|
|
|
|
"value": "111.242.13.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-34d4-4b80-9dd0-bda5950d210f",
|
|
|
|
|
"value": "111.242.165.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-ebec-43f9-8254-bda5950d210f",
|
|
|
|
|
"value": "111.242.232.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-14b0-4ceb-9bbc-bda5950d210f",
|
|
|
|
|
"value": "111.242.39.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-0c04-4736-844d-bda5950d210f",
|
|
|
|
|
"value": "111.243.190.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-4554-449a-b452-bda5950d210f",
|
|
|
|
|
"value": "111.243.41.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-bf58-47cc-bfa7-bda5950d210f",
|
|
|
|
|
"value": "111.246.149.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-8fb0-460d-b72b-bda5950d210f",
|
|
|
|
|
"value": "111.246.169.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-e5c4-4197-b86c-bda5950d210f",
|
|
|
|
|
"value": "111.246.81.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-d4dc-4046-876e-bda5950d210f",
|
|
|
|
|
"value": "111.246.85.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-6018-41ab-82f7-bda5950d210f",
|
|
|
|
|
"value": "111.248.2.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-0e18-4794-b56b-bda5950d210f",
|
|
|
|
|
"value": "111.248.31.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-4b10-40e5-aa68-bda5950d210f",
|
|
|
|
|
"value": "111.248.81.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-2cbc-4ddb-8a8f-bda5950d210f",
|
|
|
|
|
"value": "111.250.226.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-04a4-4613-a1ca-bda5950d210f",
|
|
|
|
|
"value": "111.250.233.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-fa60-4f08-9d7f-bda5950d210f",
|
|
|
|
|
"value": "111.250.29.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-9a10-44b7-bd44-bda5950d210f",
|
|
|
|
|
"value": "111.250.80.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-5c68-499d-8768-bda5950d210f",
|
|
|
|
|
"value": "111.251.209.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-5e24-40c5-bafa-bda5950d210f",
|
|
|
|
|
"value": "111.252.121.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-4c18-4f25-a8c2-bda5950d210f",
|
|
|
|
|
"value": "111.252.140.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-1360-4af4-a8d8-bda5950d210f",
|
|
|
|
|
"value": "111.252.238.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-c8b0-4f34-b1a3-bda5950d210f",
|
|
|
|
|
"value": "111.254.200.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-2d24-476d-b1b9-bda5950d210f",
|
|
|
|
|
"value": "112.1.35.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-0b9c-4d57-b578-bda5950d210f",
|
|
|
|
|
"value": "112.104.130.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-f950-485a-b6fd-bda5950d210f",
|
|
|
|
|
"value": "112.118.152.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-ee2c-4060-b747-bda5950d210f",
|
|
|
|
|
"value": "112.118.198.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-4004-4896-9699-bda5950d210f",
|
|
|
|
|
"value": "112.118.46.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-5f94-4ef5-bf80-bda5950d210f",
|
|
|
|
|
"value": "112.118.59.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-6528-4d87-90cf-bda5950d210f",
|
|
|
|
|
"value": "112.118.80.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-06bc-47e1-9499-bda5950d210f",
|
|
|
|
|
"value": "112.119.213.100"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-76c4-4cd9-b414-bda5950d210f",
|
|
|
|
|
"value": "112.119.220.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-bfe0-4486-92ab-bda5950d210f",
|
|
|
|
|
"value": "112.120.174.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-1edc-4ce9-952b-bda5950d210f",
|
|
|
|
|
"value": "112.120.181.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-3318-4511-8a75-bda5950d210f",
|
|
|
|
|
"value": "112.120.189.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-4a74-4e38-8c36-bda5950d210f",
|
|
|
|
|
"value": "112.165.85.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-db70-4a68-ad16-bda5950d210f",
|
|
|
|
|
"value": "112.172.6.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-31f8-471e-8979-bda5950d210f",
|
|
|
|
|
"value": "112.184.115.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-bac0-457c-a5d5-bda5950d210f",
|
|
|
|
|
"value": "112.187.211.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-710c-426d-ae68-bda5950d210f",
|
|
|
|
|
"value": "112.194.117.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-23e4-4efc-a320-bda5950d210f",
|
|
|
|
|
"value": "112.197.97.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-fd80-4517-9cb7-bda5950d210f",
|
|
|
|
|
"value": "112.199.236.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-f428-49e9-9218-bda5950d210f",
|
|
|
|
|
"value": "112.226.242.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-bc04-4c95-817e-bda5950d210f",
|
|
|
|
|
"value": "112.66.71.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-d424-42a4-b4cb-bda5950d210f",
|
|
|
|
|
"value": "113.116.88.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-bf54-4bc5-8449-bda5950d210f",
|
|
|
|
|
"value": "113.182.35.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-235c-41ef-99f3-bda5950d210f",
|
|
|
|
|
"value": "113.219.47.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-eb6c-4314-8a2c-bda5950d210f",
|
|
|
|
|
"value": "113.22.208.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-d7e0-4ef0-8d23-bda5950d210f",
|
|
|
|
|
"value": "113.25.165.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-848c-441d-a1af-bda5950d210f",
|
|
|
|
|
"value": "113.25.166.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-0340-4e66-b9b7-bda5950d210f",
|
|
|
|
|
"value": "113.252.191.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-d648-4ef3-9cf8-bda5950d210f",
|
|
|
|
|
"value": "113.253.178.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-d02c-4f74-91a2-bda5950d210f",
|
|
|
|
|
"value": "113.253.228.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-4b80-4108-bde3-bda5950d210f",
|
|
|
|
|
"value": "113.253.57.249"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-259c-4bf5-b037-bda5950d210f",
|
|
|
|
|
"value": "113.254.144.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-bcec-469a-a101-bda5950d210f",
|
|
|
|
|
"value": "113.254.226.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-6d28-4668-85a4-bda5950d210f",
|
|
|
|
|
"value": "113.254.247.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-db84-4eaa-829d-bda5950d210f",
|
|
|
|
|
"value": "113.254.250.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-2d78-4beb-b190-bda5950d210f",
|
|
|
|
|
"value": "113.254.37.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-88f0-4b66-be2d-bda5950d210f",
|
|
|
|
|
"value": "113.26.62.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624844",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04c-4e44-4900-9f6d-bda5950d210f",
|
|
|
|
|
"value": "113.70.76.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-9624-4fd2-b8b0-bda5950d210f",
|
|
|
|
|
"value": "114.199.223.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-a8d4-4365-8be8-bda5950d210f",
|
|
|
|
|
"value": "114.24.208.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-93d8-4d98-96f7-bda5950d210f",
|
|
|
|
|
"value": "114.24.64.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-bc8c-4645-a0ae-bda5950d210f",
|
|
|
|
|
"value": "114.24.91.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-546c-49a3-a7f7-bda5950d210f",
|
|
|
|
|
"value": "114.250.110.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-ace8-418b-bc37-bda5950d210f",
|
|
|
|
|
"value": "114.26.108.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-0690-47e2-afc2-bda5950d210f",
|
|
|
|
|
"value": "114.26.43.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-2b98-47d5-b7dc-bda5950d210f",
|
|
|
|
|
"value": "114.32.120.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-8fdc-49d7-900a-bda5950d210f",
|
|
|
|
|
"value": "114.32.185.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-9860-43b0-8ae8-bda5950d210f",
|
|
|
|
|
"value": "114.32.188.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-6c58-441d-95a1-bda5950d210f",
|
|
|
|
|
"value": "114.32.20.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-8fb8-407f-9c19-bda5950d210f",
|
|
|
|
|
"value": "114.32.227.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-8fcc-4b74-a458-bda5950d210f",
|
|
|
|
|
"value": "114.32.232.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-86d4-4cd4-ab45-bda5950d210f",
|
|
|
|
|
"value": "114.32.29.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-e4a4-444f-9527-bda5950d210f",
|
|
|
|
|
"value": "114.32.35.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-f9f0-4a52-9ec3-bda5950d210f",
|
|
|
|
|
"value": "114.32.37.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-ed40-4a0f-bbcb-bda5950d210f",
|
|
|
|
|
"value": "114.32.47.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-956c-42b8-9a48-bda5950d210f",
|
|
|
|
|
"value": "114.33.11.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-ee4c-4723-8360-bda5950d210f",
|
|
|
|
|
"value": "114.33.127.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-69e0-4c9b-9c48-bda5950d210f",
|
|
|
|
|
"value": "114.33.146.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-1ab0-4b57-8b90-bda5950d210f",
|
|
|
|
|
"value": "114.33.212.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-fd50-40d8-9b9e-bda5950d210f",
|
|
|
|
|
"value": "114.34.176.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-5a58-4a4f-903b-bda5950d210f",
|
|
|
|
|
"value": "114.34.194.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-8b3c-47ff-82d9-bda5950d210f",
|
|
|
|
|
"value": "114.34.228.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-468c-44b9-8fd5-bda5950d210f",
|
|
|
|
|
"value": "114.34.56.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-dd00-402f-8df4-bda5950d210f",
|
|
|
|
|
"value": "114.35.108.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-6f28-4cde-a25f-bda5950d210f",
|
|
|
|
|
"value": "114.35.109.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-c990-4f04-b329-bda5950d210f",
|
|
|
|
|
"value": "114.35.124.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-40a0-4e07-8944-bda5950d210f",
|
|
|
|
|
"value": "114.35.27.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-47f8-4b4c-9d4c-bda5950d210f",
|
|
|
|
|
"value": "114.35.47.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-b738-4add-980c-bda5950d210f",
|
|
|
|
|
"value": "114.35.59.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-0e88-49fe-819a-bda5950d210f",
|
|
|
|
|
"value": "114.36.184.121"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-c140-40ae-9e9e-bda5950d210f",
|
|
|
|
|
"value": "114.37.124.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-8f40-4e42-bed9-bda5950d210f",
|
|
|
|
|
"value": "114.38.167.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-99b0-4986-bb8f-bda5950d210f",
|
|
|
|
|
"value": "114.38.2.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-dccc-4ace-b15c-bda5950d210f",
|
|
|
|
|
"value": "114.38.27.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-c804-4efa-9791-bda5950d210f",
|
|
|
|
|
"value": "114.39.155.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-a018-485e-9632-bda5950d210f",
|
|
|
|
|
"value": "114.40.112.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-9b4c-4d80-9773-bda5950d210f",
|
|
|
|
|
"value": "114.40.169.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-6c58-41a6-b99e-bda5950d210f",
|
|
|
|
|
"value": "114.40.176.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-f6a8-4260-98e1-bda5950d210f",
|
|
|
|
|
"value": "114.40.240.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-762c-4054-bed5-bda5950d210f",
|
|
|
|
|
"value": "114.40.46.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-d09c-494d-967e-bda5950d210f",
|
|
|
|
|
"value": "114.40.52.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-06e8-45e4-ad97-bda5950d210f",
|
|
|
|
|
"value": "114.41.204.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-2f6c-420f-91be-bda5950d210f",
|
|
|
|
|
"value": "114.41.27.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-95b0-4685-a5bb-bda5950d210f",
|
|
|
|
|
"value": "114.41.43.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-47c4-426b-bacf-bda5950d210f",
|
|
|
|
|
"value": "114.43.172.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-6950-404c-a431-bda5950d210f",
|
|
|
|
|
"value": "114.43.219.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-34c8-4d03-8503-bda5950d210f",
|
|
|
|
|
"value": "114.43.56.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-033c-4ed1-a08f-bda5950d210f",
|
|
|
|
|
"value": "114.44.54.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624845",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04d-e368-41f3-b903-bda5950d210f",
|
|
|
|
|
"value": "114.45.126.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-c844-4b34-b3c3-bda5950d210f",
|
|
|
|
|
"value": "114.45.139.217"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-7db8-4a87-8088-bda5950d210f",
|
|
|
|
|
"value": "114.45.33.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-2bc0-4cb2-b807-bda5950d210f",
|
|
|
|
|
"value": "114.45.79.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-912c-498e-9831-bda5950d210f",
|
|
|
|
|
"value": "114.46.129.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-f42c-435b-9245-bda5950d210f",
|
|
|
|
|
"value": "114.46.63.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-5fa8-441a-b31a-bda5950d210f",
|
|
|
|
|
"value": "115.50.210.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-df98-4310-bb81-bda5950d210f",
|
|
|
|
|
"value": "115.58.16.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-1bf4-43c5-8249-bda5950d210f",
|
|
|
|
|
"value": "115.59.51.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-feb0-4909-baee-bda5950d210f",
|
|
|
|
|
"value": "115.61.12.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-61f8-44d2-81e7-bda5950d210f",
|
|
|
|
|
"value": "115.74.183.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-16a4-45a4-9785-bda5950d210f",
|
|
|
|
|
"value": "115.75.124.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-3120-4353-9ba9-bda5950d210f",
|
|
|
|
|
"value": "115.76.217.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-2218-4d10-80bd-bda5950d210f",
|
|
|
|
|
"value": "115.76.229.156"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-96f4-417d-bd61-bda5950d210f",
|
|
|
|
|
"value": "115.77.205.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-6418-4d38-ba9a-bda5950d210f",
|
|
|
|
|
"value": "115.97.50.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-6d88-4177-bba3-bda5950d210f",
|
|
|
|
|
"value": "116.100.15.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-5668-4d4a-8295-bda5950d210f",
|
|
|
|
|
"value": "116.100.9.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-dd60-487e-bb99-bda5950d210f",
|
|
|
|
|
"value": "116.101.61.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-d380-426d-83be-bda5950d210f",
|
|
|
|
|
"value": "116.104.120.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-5328-47c8-ab65-bda5950d210f",
|
|
|
|
|
"value": "116.104.120.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-7da8-4395-8bbc-bda5950d210f",
|
|
|
|
|
"value": "116.104.120.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-d960-4951-9a38-bda5950d210f",
|
|
|
|
|
"value": "116.104.123.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-592c-412e-9fb5-bda5950d210f",
|
|
|
|
|
"value": "116.104.124.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-d168-45d8-aa3c-bda5950d210f",
|
|
|
|
|
"value": "116.104.125.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-8bc4-4f7c-aadc-bda5950d210f",
|
|
|
|
|
"value": "116.104.32.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-e5ec-435e-8008-bda5950d210f",
|
|
|
|
|
"value": "116.104.32.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-a0f4-43f9-93a8-bda5950d210f",
|
|
|
|
|
"value": "116.104.36.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-d0c8-4f56-afde-bda5950d210f",
|
|
|
|
|
"value": "116.104.37.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-6994-4c21-bea6-bda5950d210f",
|
|
|
|
|
"value": "116.104.38.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-91e0-4702-88d7-bda5950d210f",
|
|
|
|
|
"value": "116.107.146.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-05d0-4cfa-91fd-bda5950d210f",
|
|
|
|
|
"value": "116.107.19.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-3860-46cb-9c4d-bda5950d210f",
|
|
|
|
|
"value": "116.107.21.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-d554-4c6a-a85a-bda5950d210f",
|
|
|
|
|
"value": "116.109.58.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-b024-4b9d-833c-bda5950d210f",
|
|
|
|
|
"value": "116.111.45.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-10b0-4267-b0e5-bda5950d210f",
|
|
|
|
|
"value": "116.111.47.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-e40c-44e8-83a6-bda5950d210f",
|
|
|
|
|
"value": "116.113.99.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-7160-4ecf-9264-bda5950d210f",
|
|
|
|
|
"value": "116.113.99.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-b398-45cd-b667-bda5950d210f",
|
|
|
|
|
"value": "116.241.29.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-c4f4-473a-ae44-bda5950d210f",
|
|
|
|
|
"value": "116.48.13.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-1e90-41b6-b9d8-bda5950d210f",
|
|
|
|
|
"value": "116.48.84.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-a944-456b-bbd2-bda5950d210f",
|
|
|
|
|
"value": "116.49.141.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-71d4-40b7-b3b6-bda5950d210f",
|
|
|
|
|
"value": "116.72.51.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-c3f8-4661-908f-bda5950d210f",
|
|
|
|
|
"value": "116.87.188.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-78f0-48b2-9b99-bda5950d210f",
|
|
|
|
|
"value": "116.96.107.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-3b78-41f8-aa80-bda5950d210f",
|
|
|
|
|
"value": "116.97.178.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-ff50-476a-a467-bda5950d210f",
|
|
|
|
|
"value": "116.97.57.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-7828-49a9-9e1d-bda5950d210f",
|
|
|
|
|
"value": "116.97.60.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-4dd4-4c79-a38a-bda5950d210f",
|
|
|
|
|
"value": "117.0.188.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-c3a8-4994-bd5a-bda5950d210f",
|
|
|
|
|
"value": "117.0.190.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-6bc4-406a-b25f-bda5950d210f",
|
|
|
|
|
"value": "117.0.191.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-97f0-4caa-85ca-bda5950d210f",
|
|
|
|
|
"value": "117.0.9.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-7564-4d89-8be2-bda5950d210f",
|
|
|
|
|
"value": "117.1.150.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-2db0-446e-ae35-bda5950d210f",
|
|
|
|
|
"value": "117.1.151.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-2310-4401-93ac-bda5950d210f",
|
|
|
|
|
"value": "117.1.94.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-899c-4fa0-b14a-bda5950d210f",
|
|
|
|
|
"value": "117.5.211.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-dd3c-4747-b220-bda5950d210f",
|
|
|
|
|
"value": "117.5.246.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-29d4-4f58-8787-bda5950d210f",
|
|
|
|
|
"value": "117.5.249.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-7c64-497c-8a34-bda5950d210f",
|
|
|
|
|
"value": "117.5.250.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-f92c-4b6f-956a-bda5950d210f",
|
|
|
|
|
"value": "117.5.255.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624846",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04e-7d60-4c25-ae26-bda5950d210f",
|
|
|
|
|
"value": "117.7.104.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-4fc4-4cde-bb35-bda5950d210f",
|
|
|
|
|
"value": "117.7.104.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-e164-4476-9b87-bda5950d210f",
|
|
|
|
|
"value": "117.7.107.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-3e88-454b-ae8f-bda5950d210f",
|
|
|
|
|
"value": "117.93.14.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-439c-4fba-8428-bda5950d210f",
|
|
|
|
|
"value": "117.94.144.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-8448-45a9-acaf-bda5950d210f",
|
|
|
|
|
"value": "117.94.162.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-6050-4fa3-971d-bda5950d210f",
|
|
|
|
|
"value": "118.100.39.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-af4c-452a-9def-bda5950d210f",
|
|
|
|
|
"value": "118.165.126.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-5a5c-464e-a3ca-bda5950d210f",
|
|
|
|
|
"value": "118.165.138.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-c424-48b5-9063-bda5950d210f",
|
|
|
|
|
"value": "118.165.67.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-3900-48f5-8dda-bda5950d210f",
|
|
|
|
|
"value": "118.166.112.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-def0-41ba-9a22-bda5950d210f",
|
|
|
|
|
"value": "118.167.32.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-3a18-4c4a-9595-bda5950d210f",
|
|
|
|
|
"value": "118.168.130.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-ed1c-439b-aabb-bda5950d210f",
|
|
|
|
|
"value": "118.170.154.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-c1a4-4eed-93ed-bda5950d210f",
|
|
|
|
|
"value": "118.170.206.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-5858-4e4d-aa69-bda5950d210f",
|
|
|
|
|
"value": "118.170.207.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-5b38-42cb-8d35-bda5950d210f",
|
|
|
|
|
"value": "118.170.235.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-04f8-4b9e-9c05-bda5950d210f",
|
|
|
|
|
"value": "118.32.23.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-e05c-45da-9386-bda5950d210f",
|
|
|
|
|
"value": "118.34.214.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-ce78-4b74-98f8-bda5950d210f",
|
|
|
|
|
"value": "118.38.124.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-58b8-46c0-bc88-bda5950d210f",
|
|
|
|
|
"value": "118.39.155.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-2824-4726-b6ae-bda5950d210f",
|
|
|
|
|
"value": "118.42.173.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-9e2c-40d7-8dbb-bda5950d210f",
|
|
|
|
|
"value": "118.42.175.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-1af4-41a8-a8ff-bda5950d210f",
|
|
|
|
|
"value": "118.42.176.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-05c8-41e3-be31-bda5950d210f",
|
|
|
|
|
"value": "118.71.31.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-7168-4025-bbab-bda5950d210f",
|
|
|
|
|
"value": "119.193.100.249"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-fa10-4140-9424-bda5950d210f",
|
|
|
|
|
"value": "119.200.112.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-b574-41c8-817f-bda5950d210f",
|
|
|
|
|
"value": "119.202.101.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-feec-48f0-aa37-bda5950d210f",
|
|
|
|
|
"value": "119.236.136.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-0ac8-4dac-925f-bda5950d210f",
|
|
|
|
|
"value": "119.236.194.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-576c-49a4-981d-bda5950d210f",
|
|
|
|
|
"value": "119.236.9.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-03d4-4496-9da4-bda5950d210f",
|
|
|
|
|
"value": "119.237.175.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-6280-4f45-8366-bda5950d210f",
|
|
|
|
|
"value": "119.237.35.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-0e94-4cd3-8733-bda5950d210f",
|
|
|
|
|
"value": "119.237.40.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-cc3c-48ae-9a41-bda5950d210f",
|
|
|
|
|
"value": "119.237.70.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-8204-419a-8107-bda5950d210f",
|
|
|
|
|
"value": "119.237.75.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-11c4-4a4a-b59e-bda5950d210f",
|
|
|
|
|
"value": "119.247.82.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624847",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f04f-1c58-45f3-8dd8-bda5950d210f",
|
|
|
|
|
"value": "119.7.192.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-8508-46a1-8f19-bda5950d210f",
|
|
|
|
|
"value": "120.138.6.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-c378-473f-8e3b-bda5950d210f",
|
|
|
|
|
"value": "120.50.11.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-a3f8-4906-aa7c-bda5950d210f",
|
|
|
|
|
"value": "121.121.119.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-4558-449e-bc98-bda5950d210f",
|
|
|
|
|
"value": "121.132.132.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-f90c-4211-8bde-bda5950d210f",
|
|
|
|
|
"value": "121.133.208.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-8f9c-47f5-b40a-bda5950d210f",
|
|
|
|
|
"value": "121.136.178.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-fe5c-4b84-91b9-bda5950d210f",
|
|
|
|
|
"value": "121.141.9.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-1fb4-4b12-9d2a-bda5950d210f",
|
|
|
|
|
"value": "121.148.26.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-a904-4396-91cc-bda5950d210f",
|
|
|
|
|
"value": "121.148.91.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-7714-4aec-b1ee-bda5950d210f",
|
|
|
|
|
"value": "121.150.9.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-a52c-411e-b052-bda5950d210f",
|
|
|
|
|
"value": "121.153.51.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-b414-44b9-b125-bda5950d210f",
|
|
|
|
|
"value": "121.176.52.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-c8d8-4c5e-9d5b-bda5950d210f",
|
|
|
|
|
"value": "121.180.188.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-3f10-470e-b9da-bda5950d210f",
|
|
|
|
|
"value": "121.189.161.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-75a0-4ac7-9817-bda5950d210f",
|
|
|
|
|
"value": "121.225.241.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-7dd8-4199-bf85-bda5950d210f",
|
|
|
|
|
"value": "121.254.118.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-a948-425d-8a20-bda5950d210f",
|
|
|
|
|
"value": "121.61.106.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-a728-4418-854a-bda5950d210f",
|
|
|
|
|
"value": "122.116.0.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-8f78-4fad-9f86-bda5950d210f",
|
|
|
|
|
"value": "122.116.17.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f050-0140-4095-8e9d-bda5950d210f",
|
|
|
|
|
"value": "122.116.218.217"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624848",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-22e0-404f-925e-bda5950d210f",
|
|
|
|
|
"value": "122.117.109.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-d598-45ec-9ea6-bda5950d210f",
|
|
|
|
|
"value": "122.117.142.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-0b64-47f2-8d0d-bda5950d210f",
|
|
|
|
|
"value": "122.117.72.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-60d4-47a7-991f-bda5950d210f",
|
|
|
|
|
"value": "122.117.74.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-8470-42a8-9f19-bda5950d210f",
|
|
|
|
|
"value": "122.117.86.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-6920-468b-ba4c-bda5950d210f",
|
|
|
|
|
"value": "122.252.72.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-48a4-41c8-b954-bda5950d210f",
|
|
|
|
|
"value": "122.254.1.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-a888-4cf7-93f3-bda5950d210f",
|
|
|
|
|
"value": "122.254.26.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-446c-48ea-b0b5-bda5950d210f",
|
|
|
|
|
"value": "122.254.27.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-7438-42d9-be6b-bda5950d210f",
|
|
|
|
|
"value": "122.254.37.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-355c-4927-aa3c-bda5950d210f",
|
|
|
|
|
"value": "123.10.150.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-2db0-48da-8e84-bda5950d210f",
|
|
|
|
|
"value": "123.11.12.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-3ea8-4955-ae64-bda5950d210f",
|
|
|
|
|
"value": "123.11.72.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-caf4-431a-8b4a-bda5950d210f",
|
|
|
|
|
"value": "123.110.13.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-e33c-4163-846a-bda5950d210f",
|
|
|
|
|
"value": "123.13.0.127"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-8bf0-4cd3-8f7d-bda5950d210f",
|
|
|
|
|
"value": "123.150.45.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-1c3c-43b8-af01-bda5950d210f",
|
|
|
|
|
"value": "123.181.58.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-7288-4138-b376-bda5950d210f",
|
|
|
|
|
"value": "123.181.64.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-65b4-4202-bede-bda5950d210f",
|
|
|
|
|
"value": "123.193.144.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-a250-471f-9702-bda5950d210f",
|
|
|
|
|
"value": "123.194.114.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-4e64-4ff0-9c7c-bda5950d210f",
|
|
|
|
|
"value": "123.201.108.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-41b4-42ad-aeba-bda5950d210f",
|
|
|
|
|
"value": "123.202.23.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-7a8c-4762-983d-bda5950d210f",
|
|
|
|
|
"value": "123.204.47.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-7d2c-4d1c-8ef4-bda5950d210f",
|
|
|
|
|
"value": "123.205.177.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-b384-4394-b567-bda5950d210f",
|
|
|
|
|
"value": "123.205.89.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-4b2c-4ab1-a704-bda5950d210f",
|
|
|
|
|
"value": "123.24.168.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-54dc-4696-bd20-bda5950d210f",
|
|
|
|
|
"value": "123.24.94.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-7b74-432e-8a1b-bda5950d210f",
|
|
|
|
|
"value": "123.240.180.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-28f4-4e62-90d2-bda5950d210f",
|
|
|
|
|
"value": "123.241.102.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-7810-44b7-95e7-bda5950d210f",
|
|
|
|
|
"value": "123.252.229.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-3d30-4de3-974d-bda5950d210f",
|
|
|
|
|
"value": "123.254.138.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-cc8c-430d-9f66-bda5950d210f",
|
|
|
|
|
"value": "123.28.228.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-6160-4aa5-a338-bda5950d210f",
|
|
|
|
|
"value": "123.7.161.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-ff1c-413e-a483-bda5950d210f",
|
|
|
|
|
"value": "125.129.60.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-d6cc-4581-a424-bda5950d210f",
|
|
|
|
|
"value": "125.141.54.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-a6ec-4cec-993b-bda5950d210f",
|
|
|
|
|
"value": "125.224.145.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-bb60-4125-b513-bda5950d210f",
|
|
|
|
|
"value": "125.224.85.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-46dc-4b41-92cb-bda5950d210f",
|
|
|
|
|
"value": "125.227.22.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-95cc-45f4-a470-bda5950d210f",
|
|
|
|
|
"value": "125.227.62.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-a7f0-4300-95c6-bda5950d210f",
|
|
|
|
|
"value": "125.227.89.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-4724-42fd-997c-bda5950d210f",
|
|
|
|
|
"value": "125.230.163.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-c868-4215-8b85-bda5950d210f",
|
|
|
|
|
"value": "125.230.242.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-eed4-483f-88b9-bda5950d210f",
|
|
|
|
|
"value": "125.231.119.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-0520-418d-9e96-bda5950d210f",
|
|
|
|
|
"value": "125.231.133.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-0ae0-41b9-9e42-bda5950d210f",
|
|
|
|
|
"value": "125.231.141.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-a060-4e95-b595-bda5950d210f",
|
|
|
|
|
"value": "125.231.57.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-5528-4e36-9185-bda5950d210f",
|
|
|
|
|
"value": "125.231.63.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-c484-498a-9f51-bda5950d210f",
|
|
|
|
|
"value": "125.231.81.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-10a0-474e-b280-bda5950d210f",
|
|
|
|
|
"value": "125.231.96.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624849",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f051-9138-401e-b5cd-bda5950d210f",
|
|
|
|
|
"value": "125.45.9.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-109c-4426-bf8f-bda5950d210f",
|
|
|
|
|
"value": "126.117.22.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-2e58-4d15-ac61-bda5950d210f",
|
|
|
|
|
"value": "13.82.23.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-dc40-40ae-a7e6-bda5950d210f",
|
|
|
|
|
"value": "132.255.218.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-e294-40ad-b642-bda5950d210f",
|
|
|
|
|
"value": "134.17.139.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-7c48-439b-a1ba-bda5950d210f",
|
|
|
|
|
"value": "136.34.213.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-d5d4-44b3-84e6-bda5950d210f",
|
|
|
|
|
"value": "138.219.33.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-4d20-4337-921f-bda5950d210f",
|
|
|
|
|
"value": "139.5.228.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-07f0-4b0d-a036-bda5950d210f",
|
|
|
|
|
"value": "14.136.54.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-b6bc-433a-a1bf-bda5950d210f",
|
|
|
|
|
"value": "14.173.141.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-7140-45e3-8078-bda5950d210f",
|
|
|
|
|
"value": "14.192.0.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-7b68-4e1a-b186-bda5950d210f",
|
|
|
|
|
"value": "14.236.180.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-842c-4b58-bc3c-bda5950d210f",
|
|
|
|
|
"value": "14.237.62.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-fe8c-419e-bc9c-bda5950d210f",
|
|
|
|
|
"value": "14.47.193.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-68e8-487d-80a9-bda5950d210f",
|
|
|
|
|
"value": "14.48.246.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-dc74-45dd-9d88-bda5950d210f",
|
|
|
|
|
"value": "14.50.246.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-973c-476d-b9ee-bda5950d210f",
|
|
|
|
|
"value": "14.53.191.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-b3d0-4048-a5b8-bda5950d210f",
|
|
|
|
|
"value": "143.202.170.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-31dc-439c-b7b3-bda5950d210f",
|
|
|
|
|
"value": "151.177.173.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-0688-4a31-a3ea-bda5950d210f",
|
|
|
|
|
"value": "151.177.53.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-5984-4b92-9529-bda5950d210f",
|
|
|
|
|
"value": "152.249.235.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-b648-4427-9015-bda5950d210f",
|
|
|
|
|
"value": "153.99.108.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-9b64-4faf-bb7f-bda5950d210f",
|
|
|
|
|
"value": "154.127.151.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-2e54-4ed7-90db-bda5950d210f",
|
|
|
|
|
"value": "157.119.204.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-2340-4777-85c0-bda5950d210f",
|
|
|
|
|
"value": "163.47.143.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-aa74-42d7-abf1-bda5950d210f",
|
|
|
|
|
"value": "168.70.114.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-eb34-4dd0-9ffc-bda5950d210f",
|
|
|
|
|
"value": "168.70.35.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-c804-4756-8b67-bda5950d210f",
|
|
|
|
|
"value": "168.70.78.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-4ae0-4c96-a3ac-bda5950d210f",
|
|
|
|
|
"value": "168.70.83.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-9668-4053-a26a-bda5950d210f",
|
|
|
|
|
"value": "168.70.95.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-37e0-4f58-8fa4-bda5950d210f",
|
|
|
|
|
"value": "169.1.33.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-8460-4fec-a505-bda5950d210f",
|
|
|
|
|
"value": "170.231.196.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-90fc-48df-80b5-bda5950d210f",
|
|
|
|
|
"value": "170.231.197.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-a024-4539-abef-bda5950d210f",
|
|
|
|
|
"value": "171.112.184.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-be80-4890-9a78-bda5950d210f",
|
|
|
|
|
"value": "171.112.251.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-f1b4-499a-944e-bda5950d210f",
|
|
|
|
|
"value": "171.226.192.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-e6b0-492e-8bf8-bda5950d210f",
|
|
|
|
|
"value": "171.229.109.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-5d5c-4b08-8afe-bda5950d210f",
|
|
|
|
|
"value": "171.229.160.201"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-002c-4dcc-9619-bda5950d210f",
|
|
|
|
|
"value": "171.229.165.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-bb98-4790-835c-bda5950d210f",
|
|
|
|
|
"value": "171.229.165.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-4e5c-4c37-932a-bda5950d210f",
|
|
|
|
|
"value": "171.229.169.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-3bc8-4a8b-ac70-bda5950d210f",
|
|
|
|
|
"value": "171.229.170.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-00b8-46ea-9166-bda5950d210f",
|
|
|
|
|
"value": "171.229.170.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-d228-41a1-bc2b-bda5950d210f",
|
|
|
|
|
"value": "171.229.170.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-afb4-4f9c-8d4a-bda5950d210f",
|
|
|
|
|
"value": "171.229.171.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-7e04-4b73-8e2d-bda5950d210f",
|
|
|
|
|
"value": "171.229.193.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-774c-4a8e-bbed-bda5950d210f",
|
|
|
|
|
"value": "171.229.228.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-51b8-46ca-89fa-bda5950d210f",
|
|
|
|
|
"value": "171.229.99.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624850",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f052-9b5c-4c1c-aeb3-bda5950d210f",
|
|
|
|
|
"value": "171.232.88.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-e9dc-4f2a-9109-bda5950d210f",
|
|
|
|
|
"value": "171.233.42.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-bf50-4848-96de-bda5950d210f",
|
|
|
|
|
"value": "171.233.84.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-1144-4edf-97e6-bda5950d210f",
|
|
|
|
|
"value": "171.234.179.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-4524-4a3c-ae84-bda5950d210f",
|
|
|
|
|
"value": "171.234.180.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-d0a8-46e5-bbf0-bda5950d210f",
|
|
|
|
|
"value": "171.234.188.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-e5ac-493d-96c1-bda5950d210f",
|
|
|
|
|
"value": "171.234.190.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-a074-462d-9e6b-bda5950d210f",
|
|
|
|
|
"value": "171.237.140.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-1a64-411d-a480-bda5950d210f",
|
|
|
|
|
"value": "171.237.140.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-2048-4b39-9de0-bda5950d210f",
|
|
|
|
|
"value": "171.237.141.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-c5a8-4885-8255-bda5950d210f",
|
|
|
|
|
"value": "171.237.145.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-72fc-41f5-b6de-bda5950d210f",
|
|
|
|
|
"value": "171.237.151.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-e76c-412c-8ed1-bda5950d210f",
|
|
|
|
|
"value": "171.237.153.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-3990-4e3c-a2b2-bda5950d210f",
|
|
|
|
|
"value": "171.237.154.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-284c-4441-9290-bda5950d210f",
|
|
|
|
|
"value": "171.237.155.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-1dac-47fd-9d57-bda5950d210f",
|
|
|
|
|
"value": "171.237.156.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-11fc-433b-9bff-bda5950d210f",
|
|
|
|
|
"value": "171.242.102.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-75d0-41f9-83b7-bda5950d210f",
|
|
|
|
|
"value": "171.242.105.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-196c-4c3a-af18-bda5950d210f",
|
|
|
|
|
"value": "171.242.107.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-91e0-4f13-bcfa-bda5950d210f",
|
|
|
|
|
"value": "171.242.112.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-7b80-4efa-8177-bda5950d210f",
|
|
|
|
|
"value": "171.242.121.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-64a4-4e13-a88f-bda5950d210f",
|
|
|
|
|
"value": "171.242.177.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-29e0-41c0-8196-bda5950d210f",
|
|
|
|
|
"value": "171.242.250.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-dd64-43af-996a-bda5950d210f",
|
|
|
|
|
"value": "171.242.26.49"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-211c-4269-b18b-bda5950d210f",
|
|
|
|
|
"value": "171.242.32.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-1784-4318-bf74-bda5950d210f",
|
|
|
|
|
"value": "171.242.69.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-2048-4972-bd61-bda5950d210f",
|
|
|
|
|
"value": "171.242.79.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-f490-4a54-8bc0-bda5950d210f",
|
|
|
|
|
"value": "171.242.79.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-91e0-49d1-ac75-bda5950d210f",
|
|
|
|
|
"value": "171.242.79.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-e984-41f7-b42d-bda5950d210f",
|
|
|
|
|
"value": "171.242.84.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-fae0-49ed-baef-bda5950d210f",
|
|
|
|
|
"value": "171.242.85.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-0a88-4fb6-80c9-bda5950d210f",
|
|
|
|
|
"value": "171.242.85.205"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-cff8-4d7b-8b88-bda5950d210f",
|
|
|
|
|
"value": "171.242.86.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-7474-465f-8795-bda5950d210f",
|
|
|
|
|
"value": "171.242.89.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-6594-4675-93f8-bda5950d210f",
|
|
|
|
|
"value": "171.242.99.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-3018-4ac1-a409-bda5950d210f",
|
|
|
|
|
"value": "171.244.93.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-f834-45b8-b865-bda5950d210f",
|
|
|
|
|
"value": "171.246.34.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-dd6c-4b73-b75d-bda5950d210f",
|
|
|
|
|
"value": "171.246.35.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-6790-4b0f-a7d9-bda5950d210f",
|
|
|
|
|
"value": "171.246.40.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-b224-43a4-bfdb-bda5950d210f",
|
|
|
|
|
"value": "171.246.54.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-a1f4-4ba8-bb42-bda5950d210f",
|
|
|
|
|
"value": "171.246.60.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-26f4-4010-a49f-bda5950d210f",
|
|
|
|
|
"value": "171.246.62.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-3f5c-4860-910b-bda5950d210f",
|
|
|
|
|
"value": "171.249.221.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-9d4c-4c11-90ff-bda5950d210f",
|
|
|
|
|
"value": "171.252.202.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-2cd8-486d-9125-bda5950d210f",
|
|
|
|
|
"value": "171.252.205.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624851",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f053-a9fc-4aac-9f84-bda5950d210f",
|
|
|
|
|
"value": "171.252.207.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-cb80-4284-a06e-bda5950d210f",
|
|
|
|
|
"value": "171.253.119.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-4fd8-4800-bee1-bda5950d210f",
|
|
|
|
|
"value": "171.38.145.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-93c4-4c92-bed9-bda5950d210f",
|
|
|
|
|
"value": "171.38.147.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-fc04-4497-8fd9-bda5950d210f",
|
|
|
|
|
"value": "171.38.148.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-e1e8-4637-b196-bda5950d210f",
|
|
|
|
|
"value": "171.38.148.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-caa4-4555-a496-bda5950d210f",
|
|
|
|
|
"value": "171.38.150.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-b190-45e6-90c6-bda5950d210f",
|
|
|
|
|
"value": "171.38.194.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-c0f0-40fa-bd71-bda5950d210f",
|
|
|
|
|
"value": "171.38.195.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-26e4-4a5c-be73-bda5950d210f",
|
|
|
|
|
"value": "171.38.217.72"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-357c-4d8c-b630-bda5950d210f",
|
|
|
|
|
"value": "173.165.160.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-7d1c-47ba-bb44-bda5950d210f",
|
|
|
|
|
"value": "174.53.95.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-f378-4252-a5e8-bda5950d210f",
|
|
|
|
|
"value": "175.180.167.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-5b8c-486a-9550-bda5950d210f",
|
|
|
|
|
"value": "175.182.187.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-9cf4-403c-88e1-bda5950d210f",
|
|
|
|
|
"value": "175.202.29.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-a460-48ad-bc51-bda5950d210f",
|
|
|
|
|
"value": "175.204.209.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-4844-459d-b22b-bda5950d210f",
|
|
|
|
|
"value": "175.212.27.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-f4e4-46d2-ab04-bda5950d210f",
|
|
|
|
|
"value": "175.214.85.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-ee08-410b-ab0d-bda5950d210f",
|
|
|
|
|
"value": "176.103.205.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-3180-469b-a40c-bda5950d210f",
|
|
|
|
|
"value": "176.104.183.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-0ba4-4834-8bba-bda5950d210f",
|
|
|
|
|
"value": "176.104.183.252"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-a840-4c98-9147-bda5950d210f",
|
|
|
|
|
"value": "176.124.103.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-6044-46f4-8831-bda5950d210f",
|
|
|
|
|
"value": "176.124.146.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-0710-4184-86c1-bda5950d210f",
|
|
|
|
|
"value": "176.232.47.112"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-0ec4-44eb-8647-bda5950d210f",
|
|
|
|
|
"value": "176.62.180.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-3094-40e7-b9d9-bda5950d210f",
|
|
|
|
|
"value": "176.67.12.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-559c-487d-9be7-bda5950d210f",
|
|
|
|
|
"value": "176.8.19.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-9364-4e56-a153-bda5950d210f",
|
|
|
|
|
"value": "176.97.48.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-82f0-4587-b69a-bda5950d210f",
|
|
|
|
|
"value": "177.10.145.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-d548-462a-9300-bda5950d210f",
|
|
|
|
|
"value": "177.126.134.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-75c0-4d30-91ed-bda5950d210f",
|
|
|
|
|
"value": "177.155.36.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-3538-4787-a48a-bda5950d210f",
|
|
|
|
|
"value": "177.23.104.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-f460-4b2b-a60d-bda5950d210f",
|
|
|
|
|
"value": "177.52.212.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-af8c-49bd-8611-bda5950d210f",
|
|
|
|
|
"value": "177.54.178.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-3870-45ac-9fa1-bda5950d210f",
|
|
|
|
|
"value": "177.54.226.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-2bb8-4f0a-8b0b-bda5950d210f",
|
|
|
|
|
"value": "177.67.74.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-d2dc-498e-ab67-bda5950d210f",
|
|
|
|
|
"value": "177.92.146.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-3038-402e-bc9e-bda5950d210f",
|
|
|
|
|
"value": "178.137.91.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624852",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f054-9470-45f6-a3de-bda5950d210f",
|
|
|
|
|
"value": "178.151.83.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-f504-4c75-8fe6-bda5950d210f",
|
|
|
|
|
"value": "178.44.126.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-7c80-4551-b32e-bda5950d210f",
|
|
|
|
|
"value": "180.122.24.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-fb10-4acb-9c97-bda5950d210f",
|
|
|
|
|
"value": "180.176.148.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-7004-457a-a140-bda5950d210f",
|
|
|
|
|
"value": "180.94.170.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-e694-4e64-8139-bda5950d210f",
|
|
|
|
|
"value": "181.191.107.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-2d6c-4e26-b0b5-bda5950d210f",
|
|
|
|
|
"value": "181.224.162.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-4b38-4fae-ba9f-bda5950d210f",
|
|
|
|
|
"value": "182.101.35.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-04a8-4f55-85e5-bda5950d210f",
|
|
|
|
|
"value": "182.113.208.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-90b4-40fc-ad15-bda5950d210f",
|
|
|
|
|
"value": "182.117.30.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-7c98-48c5-a340-bda5950d210f",
|
|
|
|
|
"value": "182.122.175.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-2ba0-4340-a713-bda5950d210f",
|
|
|
|
|
"value": "182.18.249.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-7bb8-437c-bcbe-bda5950d210f",
|
|
|
|
|
"value": "182.19.180.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-eb4c-4333-ad3d-bda5950d210f",
|
|
|
|
|
"value": "182.237.175.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-0b00-42b1-a76f-bda5950d210f",
|
|
|
|
|
"value": "182.241.151.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-76f4-4efc-afbc-bda5950d210f",
|
|
|
|
|
"value": "183.104.240.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-4154-489f-98f7-bda5950d210f",
|
|
|
|
|
"value": "183.105.5.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-a9f0-4b9e-a417-bda5950d210f",
|
|
|
|
|
"value": "183.15.91.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-ce28-47a5-ad39-bda5950d210f",
|
|
|
|
|
"value": "183.80.89.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-f610-40a8-abd3-bda5950d210f",
|
|
|
|
|
"value": "183.82.61.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-a084-4697-902e-bda5950d210f",
|
|
|
|
|
"value": "183.99.89.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-4110-49f1-a0ac-bda5950d210f",
|
|
|
|
|
"value": "185.233.24.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-b098-410c-9a94-bda5950d210f",
|
|
|
|
|
"value": "185.233.26.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-2588-4277-8a50-bda5950d210f",
|
|
|
|
|
"value": "186.188.244.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-f14c-4d03-94f6-bda5950d210f",
|
|
|
|
|
"value": "186.5.36.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624853",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f055-37dc-4f47-8bce-bda5950d210f",
|
|
|
|
|
"value": "187.114.1.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-ca60-4020-a2e4-bda5950d210f",
|
|
|
|
|
"value": "187.162.57.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-7820-4b93-906d-bda5950d210f",
|
|
|
|
|
"value": "187.183.218.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-9668-45e8-9e44-bda5950d210f",
|
|
|
|
|
"value": "187.19.11.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-e914-4a40-9b1a-bda5950d210f",
|
|
|
|
|
"value": "187.45.106.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-cbd0-45c8-9826-bda5950d210f",
|
|
|
|
|
"value": "187.85.13.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-8f84-47e4-9d8d-bda5950d210f",
|
|
|
|
|
"value": "188.148.185.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-87d8-447e-a689-bda5950d210f",
|
|
|
|
|
"value": "188.148.236.87"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-1e34-4ecb-9bff-bda5950d210f",
|
|
|
|
|
"value": "188.190.69.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-d4d4-4081-9043-bda5950d210f",
|
|
|
|
|
"value": "188.230.154.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-badc-4db9-acc4-bda5950d210f",
|
|
|
|
|
"value": "190.104.246.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-0e18-4acd-b264-bda5950d210f",
|
|
|
|
|
"value": "190.240.96.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-d478-4469-a435-bda5950d210f",
|
|
|
|
|
"value": "190.7.113.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-b9a0-423b-b7a3-bda5950d210f",
|
|
|
|
|
"value": "190.85.212.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-1d0c-49eb-8813-bda5950d210f",
|
|
|
|
|
"value": "191.240.204.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-4734-43d2-88d7-bda5950d210f",
|
|
|
|
|
"value": "191.36.185.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-f3c0-4be8-b120-bda5950d210f",
|
|
|
|
|
"value": "191.6.80.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-11f8-413a-83a2-bda5950d210f",
|
|
|
|
|
"value": "192.121.130.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-0788-4357-98e6-bda5950d210f",
|
|
|
|
|
"value": "193.106.57.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-9750-4b08-b701-bda5950d210f",
|
|
|
|
|
"value": "193.138.146.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-aec0-4d33-8fe0-bda5950d210f",
|
|
|
|
|
"value": "194.14.48.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-e04c-4800-9170-bda5950d210f",
|
|
|
|
|
"value": "197.232.52.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-66b8-45ad-b586-bda5950d210f",
|
|
|
|
|
"value": "2.38.3.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-d7c0-40d0-876b-bda5950d210f",
|
|
|
|
|
"value": "2.38.63.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-6bf8-4d0c-990d-bda5950d210f",
|
|
|
|
|
"value": "203.123.106.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-be34-4a32-b00e-bda5950d210f",
|
|
|
|
|
"value": "203.218.101.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-c650-4e93-a89a-bda5950d210f",
|
|
|
|
|
"value": "203.218.184.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-cc7c-4f37-9c4b-bda5950d210f",
|
|
|
|
|
"value": "203.218.194.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-8914-4707-81fa-bda5950d210f",
|
|
|
|
|
"value": "203.218.245.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-0468-4f92-8753-bda5950d210f",
|
|
|
|
|
"value": "203.218.253.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-f2d4-483a-bfb0-bda5950d210f",
|
|
|
|
|
"value": "203.218.66.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-eeac-48b4-bb81-bda5950d210f",
|
|
|
|
|
"value": "203.218.66.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-92e8-4f98-a5b2-bda5950d210f",
|
|
|
|
|
"value": "203.234.99.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-ed2c-482a-8ab8-bda5950d210f",
|
|
|
|
|
"value": "203.74.120.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-94d8-4e7d-9213-bda5950d210f",
|
|
|
|
|
"value": "206.74.137.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-7cf0-4cba-bf53-bda5950d210f",
|
|
|
|
|
"value": "210.203.125.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-54ac-4211-ad1b-bda5950d210f",
|
|
|
|
|
"value": "210.209.184.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-1230-49d3-852a-bda5950d210f",
|
|
|
|
|
"value": "210.209.192.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-375c-47f7-817c-bda5950d210f",
|
|
|
|
|
"value": "210.209.211.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-68c8-43d5-8bc4-bda5950d210f",
|
|
|
|
|
"value": "210.223.93.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-2f90-4a74-975c-bda5950d210f",
|
|
|
|
|
"value": "210.245.33.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-0444-4adf-94da-bda5950d210f",
|
|
|
|
|
"value": "211.172.61.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-5b6c-4d2f-803c-bda5950d210f",
|
|
|
|
|
"value": "211.185.111.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-aa38-45a7-bafd-bda5950d210f",
|
|
|
|
|
"value": "211.193.60.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-e068-4767-8c7a-bda5950d210f",
|
|
|
|
|
"value": "211.195.197.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-61b4-45a7-85b0-bda5950d210f",
|
|
|
|
|
"value": "211.206.20.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-82a4-4be9-962a-bda5950d210f",
|
|
|
|
|
"value": "211.218.31.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-2010-481b-8eb6-bda5950d210f",
|
|
|
|
|
"value": "211.219.150.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-0428-4b2b-89f4-bda5950d210f",
|
|
|
|
|
"value": "211.219.197.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-2cd0-4741-a28a-bda5950d210f",
|
|
|
|
|
"value": "211.22.182.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-c9e8-4c36-ba3e-bda5950d210f",
|
|
|
|
|
"value": "211.22.182.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-be8c-4e9a-ae1e-bda5950d210f",
|
|
|
|
|
"value": "211.23.158.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624854",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f056-9d74-4d8f-ba03-bda5950d210f",
|
|
|
|
|
"value": "211.23.16.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-28e0-4a87-b031-bda5950d210f",
|
|
|
|
|
"value": "211.230.123.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-7130-490b-b475-bda5950d210f",
|
|
|
|
|
"value": "211.61.205.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-5908-47ff-aaad-bda5950d210f",
|
|
|
|
|
"value": "211.72.115.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-19c0-40db-9af4-bda5950d210f",
|
|
|
|
|
"value": "211.72.230.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-02d8-40a3-be3f-bda5950d210f",
|
|
|
|
|
"value": "211.75.181.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-c11c-4b64-ab0e-bda5950d210f",
|
|
|
|
|
"value": "213.112.73.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-16cc-4a55-99e1-bda5950d210f",
|
|
|
|
|
"value": "213.238.240.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-277c-4b82-96f0-bda5950d210f",
|
|
|
|
|
"value": "213.6.129.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-b978-4744-8a77-bda5950d210f",
|
|
|
|
|
"value": "217.211.149.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-6d28-42ad-9cd3-bda5950d210f",
|
|
|
|
|
"value": "218.102.218.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-33e0-43db-8c7f-bda5950d210f",
|
|
|
|
|
"value": "218.102.233.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-e314-4fd5-bf8f-bda5950d210f",
|
|
|
|
|
"value": "218.102.76.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-9950-4212-8b80-bda5950d210f",
|
|
|
|
|
"value": "218.103.138.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-5d9c-4ee9-8367-bda5950d210f",
|
|
|
|
|
"value": "218.103.177.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-0134-407c-83b6-bda5950d210f",
|
|
|
|
|
"value": "218.159.169.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-dee0-44c4-a707-bda5950d210f",
|
|
|
|
|
"value": "218.161.123.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-4d58-4448-b068-bda5950d210f",
|
|
|
|
|
"value": "218.164.52.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-a854-4077-8760-bda5950d210f",
|
|
|
|
|
"value": "218.164.58.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-fcd8-482d-b851-bda5950d210f",
|
|
|
|
|
"value": "218.164.8.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-b478-4047-8e9a-bda5950d210f",
|
|
|
|
|
"value": "218.166.241.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-e640-4669-a427-bda5950d210f",
|
|
|
|
|
"value": "218.173.109.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-e664-4f24-9b0a-bda5950d210f",
|
|
|
|
|
"value": "218.173.238.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-c50c-4070-a5ca-bda5950d210f",
|
|
|
|
|
"value": "218.173.48.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-d588-4018-b0ad-bda5950d210f",
|
|
|
|
|
"value": "218.173.51.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-7384-4f04-a03e-bda5950d210f",
|
|
|
|
|
"value": "218.191.190.224"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-bf4c-45da-8726-bda5950d210f",
|
|
|
|
|
"value": "218.191.239.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-586c-4418-97ad-bda5950d210f",
|
|
|
|
|
"value": "218.250.16.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-7544-400e-8f4a-bda5950d210f",
|
|
|
|
|
"value": "218.250.161.127"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-f994-471e-8bd8-bda5950d210f",
|
|
|
|
|
"value": "218.250.180.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-dd84-4382-9291-bda5950d210f",
|
|
|
|
|
"value": "218.250.251.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-f8ac-4657-a44b-bda5950d210f",
|
|
|
|
|
"value": "218.250.61.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-23ac-4c87-a276-bda5950d210f",
|
|
|
|
|
"value": "218.250.85.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-0cc4-4ff5-87ad-bda5950d210f",
|
|
|
|
|
"value": "218.250.98.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-db54-4ca8-ac12-bda5950d210f",
|
|
|
|
|
"value": "218.32.44.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-3730-4e94-b934-bda5950d210f",
|
|
|
|
|
"value": "218.35.80.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-c0a4-44aa-8176-bda5950d210f",
|
|
|
|
|
"value": "218.6.244.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-4374-4e4b-aa17-bda5950d210f",
|
|
|
|
|
"value": "218.86.199.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-3018-4cad-bf91-bda5950d210f",
|
|
|
|
|
"value": "219.155.158.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-a004-4cfd-ad65-bda5950d210f",
|
|
|
|
|
"value": "219.155.175.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-fc28-439e-a53e-bda5950d210f",
|
|
|
|
|
"value": "219.73.26.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-078c-44af-a329-bda5950d210f",
|
|
|
|
|
"value": "219.77.62.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-b5a8-4579-9714-bda5950d210f",
|
|
|
|
|
"value": "219.78.17.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-9a7c-4079-9344-bda5950d210f",
|
|
|
|
|
"value": "219.78.64.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-b358-45e3-b7ab-bda5950d210f",
|
|
|
|
|
"value": "219.78.79.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-32a8-4d0f-b51b-bda5950d210f",
|
|
|
|
|
"value": "219.78.95.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-ef28-482d-9fbf-bda5950d210f",
|
|
|
|
|
"value": "219.79.1.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-9b64-4ce8-be68-bda5950d210f",
|
|
|
|
|
"value": "219.79.123.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-a2f4-4db3-8da5-bda5950d210f",
|
|
|
|
|
"value": "219.79.177.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-ef54-4833-b045-bda5950d210f",
|
|
|
|
|
"value": "219.79.182.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-4858-44b7-b893-bda5950d210f",
|
|
|
|
|
"value": "219.79.20.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-58b4-4b68-af9c-bda5950d210f",
|
|
|
|
|
"value": "219.79.202.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-2df0-41c2-8841-bda5950d210f",
|
|
|
|
|
"value": "219.85.125.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-b318-43a4-9159-bda5950d210f",
|
|
|
|
|
"value": "220.124.181.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-09ac-46aa-a6f7-bda5950d210f",
|
|
|
|
|
"value": "220.124.89.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-59b8-4c81-b02e-bda5950d210f",
|
|
|
|
|
"value": "220.129.186.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-5f84-4ab5-badd-bda5950d210f",
|
|
|
|
|
"value": "220.129.53.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-d0fc-446a-859b-bda5950d210f",
|
|
|
|
|
"value": "220.132.118.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-2d1c-42e9-b18c-bda5950d210f",
|
|
|
|
|
"value": "220.132.57.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624855",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f057-2f08-47bb-acc6-bda5950d210f",
|
|
|
|
|
"value": "220.132.84.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-6a58-4379-805e-bda5950d210f",
|
|
|
|
|
"value": "220.133.202.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-91a0-435b-9727-bda5950d210f",
|
|
|
|
|
"value": "220.133.219.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-fb20-4f5d-b779-bda5950d210f",
|
|
|
|
|
"value": "220.133.234.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-b4f4-4750-8c81-bda5950d210f",
|
|
|
|
|
"value": "220.133.40.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-87ac-4ddc-ab1d-bda5950d210f",
|
|
|
|
|
"value": "220.133.45.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-ca48-40ae-acae-bda5950d210f",
|
|
|
|
|
"value": "220.133.64.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-e614-4a02-a02d-bda5950d210f",
|
|
|
|
|
"value": "220.134.142.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-5a68-4004-b6eb-bda5950d210f",
|
|
|
|
|
"value": "220.134.206.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-de54-4d65-9289-bda5950d210f",
|
|
|
|
|
"value": "220.135.145.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-5218-455c-aefa-bda5950d210f",
|
|
|
|
|
"value": "220.135.156.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-60d4-459e-b839-bda5950d210f",
|
|
|
|
|
"value": "220.136.148.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-59a8-4f62-afe2-bda5950d210f",
|
|
|
|
|
"value": "220.136.85.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-70bc-4d50-afae-bda5950d210f",
|
|
|
|
|
"value": "220.137.91.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-b070-40a4-94d3-bda5950d210f",
|
|
|
|
|
"value": "220.141.174.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-88c4-4406-bdc9-bda5950d210f",
|
|
|
|
|
"value": "220.141.80.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-2740-4076-930a-bda5950d210f",
|
|
|
|
|
"value": "220.142.162.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-1cfc-467e-91e1-bda5950d210f",
|
|
|
|
|
"value": "220.142.174.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-641c-460f-b3f4-bda5950d210f",
|
|
|
|
|
"value": "220.142.62.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-5888-40e0-8e92-bda5950d210f",
|
|
|
|
|
"value": "220.237.138.136"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-82d4-4d45-ae63-bda5950d210f",
|
|
|
|
|
"value": "220.81.251.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-0b78-4981-a638-bda5950d210f",
|
|
|
|
|
"value": "220.95.57.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-1af4-4ddc-bb8b-bda5950d210f",
|
|
|
|
|
"value": "221.115.136.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-ef34-4c8a-88c7-bda5950d210f",
|
|
|
|
|
"value": "221.124.111.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-eb3c-4f3f-9f01-bda5950d210f",
|
|
|
|
|
"value": "221.124.74.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-7f80-4f19-9241-bda5950d210f",
|
|
|
|
|
"value": "221.127.10.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-68fc-42e6-920a-bda5950d210f",
|
|
|
|
|
"value": "221.127.115.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-3168-42cb-9e2c-bda5950d210f",
|
|
|
|
|
"value": "221.127.125.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-7d68-4501-9fde-bda5950d210f",
|
|
|
|
|
"value": "221.127.13.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-dcac-4efc-9333-bda5950d210f",
|
|
|
|
|
"value": "221.127.17.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-5800-486a-82a7-bda5950d210f",
|
|
|
|
|
"value": "221.127.38.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-13b8-4182-8567-bda5950d210f",
|
|
|
|
|
"value": "221.127.58.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-fa28-4272-b97a-bda5950d210f",
|
|
|
|
|
"value": "221.138.149.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-e3ec-4fcb-867d-bda5950d210f",
|
|
|
|
|
"value": "221.153.218.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-df28-4001-89c6-bda5950d210f",
|
|
|
|
|
"value": "222.100.102.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-7e78-4e54-ad18-bda5950d210f",
|
|
|
|
|
"value": "222.134.5.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-7af4-426b-90c2-bda5950d210f",
|
|
|
|
|
"value": "222.139.204.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-3820-41fc-b299-bda5950d210f",
|
|
|
|
|
"value": "222.139.65.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-23d0-4a92-9518-bda5950d210f",
|
|
|
|
|
"value": "222.140.155.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-a500-4cdb-b367-bda5950d210f",
|
|
|
|
|
"value": "222.141.10.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-096c-4504-bf52-bda5950d210f",
|
|
|
|
|
"value": "222.164.135.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-0c44-4749-bf1b-bda5950d210f",
|
|
|
|
|
"value": "222.187.28.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-8e34-444b-88ef-bda5950d210f",
|
|
|
|
|
"value": "222.212.84.222"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-1404-4e99-92b2-bda5950d210f",
|
|
|
|
|
"value": "222.236.151.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-46b0-4746-b131-bda5950d210f",
|
|
|
|
|
"value": "223.16.103.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-a600-40ac-853c-bda5950d210f",
|
|
|
|
|
"value": "223.16.148.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-10ec-4e91-9925-bda5950d210f",
|
|
|
|
|
"value": "223.16.53.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-2af4-4b2d-9bd4-bda5950d210f",
|
|
|
|
|
"value": "223.16.82.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-b668-43c7-abec-bda5950d210f",
|
|
|
|
|
"value": "223.16.85.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-90a0-42f2-99e0-bda5950d210f",
|
|
|
|
|
"value": "223.17.141.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-3c80-41df-8766-bda5950d210f",
|
|
|
|
|
"value": "223.17.167.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-edd0-468d-be81-bda5950d210f",
|
|
|
|
|
"value": "223.17.179.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-2ba4-43fc-8eeb-bda5950d210f",
|
|
|
|
|
"value": "223.17.182.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-8794-4a5a-97a1-bda5950d210f",
|
|
|
|
|
"value": "223.17.75.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-4de0-4579-b72a-bda5950d210f",
|
|
|
|
|
"value": "223.17.97.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-4db4-4207-abaa-bda5950d210f",
|
|
|
|
|
"value": "223.18.109.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-e288-48e2-9009-bda5950d210f",
|
|
|
|
|
"value": "223.18.123.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-f1e8-4a61-a529-bda5950d210f",
|
|
|
|
|
"value": "223.18.144.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624856",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f058-10f0-4cf9-92fb-bda5950d210f",
|
|
|
|
|
"value": "223.18.206.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-6194-4833-8b0f-bda5950d210f",
|
|
|
|
|
"value": "223.18.233.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-816c-4e0d-a5f4-bda5950d210f",
|
|
|
|
|
"value": "223.18.238.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-4748-418c-a673-bda5950d210f",
|
|
|
|
|
"value": "223.18.240.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-8744-4774-973a-bda5950d210f",
|
|
|
|
|
"value": "223.29.199.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-1e38-4389-bef4-bda5950d210f",
|
|
|
|
|
"value": "23.233.126.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-c61c-43f7-8b4a-bda5950d210f",
|
|
|
|
|
"value": "23.98.217.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-9198-4c5d-91cd-bda5950d210f",
|
|
|
|
|
"value": "24.207.31.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-b550-43a5-9757-bda5950d210f",
|
|
|
|
|
"value": "24.222.173.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-17a4-4dbe-9fa4-bda5950d210f",
|
|
|
|
|
"value": "24.230.162.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-e204-451c-9dfb-bda5950d210f",
|
|
|
|
|
"value": "24.231.46.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-7760-4412-83d7-bda5950d210f",
|
|
|
|
|
"value": "27.10.115.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-ba74-4b41-9951-bda5950d210f",
|
|
|
|
|
"value": "27.106.103.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-1ecc-4ce7-9e19-bda5950d210f",
|
|
|
|
|
"value": "27.2.101.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-25f8-47c4-ac54-bda5950d210f",
|
|
|
|
|
"value": "27.2.159.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-2d00-492b-b093-bda5950d210f",
|
|
|
|
|
"value": "27.66.88.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-cf64-4e7f-8337-bda5950d210f",
|
|
|
|
|
"value": "27.66.89.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-6a14-4c2f-890d-bda5950d210f",
|
|
|
|
|
"value": "27.66.89.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-732c-4d07-a050-bda5950d210f",
|
|
|
|
|
"value": "27.68.20.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-b418-4392-9175-bda5950d210f",
|
|
|
|
|
"value": "27.76.210.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-0964-4d59-9d26-bda5950d210f",
|
|
|
|
|
"value": "27.76.211.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-a30c-4e6a-a0f1-bda5950d210f",
|
|
|
|
|
"value": "27.76.211.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-4594-4660-bb90-bda5950d210f",
|
|
|
|
|
"value": "27.76.216.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-8440-443d-9155-bda5950d210f",
|
|
|
|
|
"value": "27.76.217.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-2a4c-4094-8a3e-bda5950d210f",
|
|
|
|
|
"value": "27.76.221.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-57e4-45c5-9768-bda5950d210f",
|
|
|
|
|
"value": "27.76.222.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-fc3c-4044-a7fc-bda5950d210f",
|
|
|
|
|
"value": "27.76.81.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-7e18-4562-a9e1-bda5950d210f",
|
|
|
|
|
"value": "27.77.238.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-7978-43d4-b20c-bda5950d210f",
|
|
|
|
|
"value": "31.168.72.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-b350-49f9-adb5-bda5950d210f",
|
|
|
|
|
"value": "31.208.114.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-ca24-49cd-b0f2-bda5950d210f",
|
|
|
|
|
"value": "31.208.16.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-e96c-4651-a73e-bda5950d210f",
|
|
|
|
|
"value": "35.180.133.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-56d4-4082-b6ce-bda5950d210f",
|
|
|
|
|
"value": "36.225.20.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-5e9c-47b7-b0b8-bda5950d210f",
|
|
|
|
|
"value": "36.225.42.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-fe24-443e-86d5-bda5950d210f",
|
|
|
|
|
"value": "36.225.83.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-9d30-484f-a9b6-bda5950d210f",
|
|
|
|
|
"value": "36.226.130.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-1468-41fe-aaa9-bda5950d210f",
|
|
|
|
|
"value": "36.226.183.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-dfec-45dc-a6df-bda5950d210f",
|
|
|
|
|
"value": "36.226.21.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-42c8-4ee9-873e-bda5950d210f",
|
|
|
|
|
"value": "36.226.25.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-031c-480e-9f15-bda5950d210f",
|
|
|
|
|
"value": "36.226.68.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-964c-4e73-9327-bda5950d210f",
|
|
|
|
|
"value": "36.227.26.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-459c-4e67-a410-bda5950d210f",
|
|
|
|
|
"value": "36.227.62.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-f8b8-48f0-8e4f-bda5950d210f",
|
|
|
|
|
"value": "36.228.128.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-3b8c-497e-8d28-bda5950d210f",
|
|
|
|
|
"value": "36.228.254.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-336c-415e-ab78-bda5950d210f",
|
|
|
|
|
"value": "36.229.131.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-7eec-4b55-863c-bda5950d210f",
|
|
|
|
|
"value": "36.229.200.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-5dec-4617-88d8-bda5950d210f",
|
|
|
|
|
"value": "36.230.151.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-9784-47bf-a5e6-bda5950d210f",
|
|
|
|
|
"value": "36.231.218.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-e0c8-46d6-8b3f-bda5950d210f",
|
|
|
|
|
"value": "36.232.117.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-cc84-476d-a137-bda5950d210f",
|
|
|
|
|
"value": "36.232.127.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-3814-4ccb-8b55-bda5950d210f",
|
|
|
|
|
"value": "36.232.168.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-3a74-417f-95a0-bda5950d210f",
|
|
|
|
|
"value": "36.232.174.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-ae80-4e5b-92f1-bda5950d210f",
|
|
|
|
|
"value": "36.232.44.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-5164-4f2e-a00a-bda5950d210f",
|
|
|
|
|
"value": "36.232.78.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-f418-490d-b428-bda5950d210f",
|
|
|
|
|
"value": "36.233.132.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-ea1c-4c8c-9894-bda5950d210f",
|
|
|
|
|
"value": "36.233.14.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-cf44-40e9-afe1-bda5950d210f",
|
|
|
|
|
"value": "36.233.48.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-b2c0-4b3c-8e06-bda5950d210f",
|
|
|
|
|
"value": "36.234.222.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-f544-400f-917d-bda5950d210f",
|
|
|
|
|
"value": "36.234.23.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-239c-47f3-9218-bda5950d210f",
|
|
|
|
|
"value": "36.235.113.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624857",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f059-3a04-4203-96a1-bda5950d210f",
|
|
|
|
|
"value": "36.235.45.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-3fcc-42f8-8b81-bda5950d210f",
|
|
|
|
|
"value": "36.236.130.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-6ce8-48d8-9ac8-bda5950d210f",
|
|
|
|
|
"value": "36.236.135.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-9a40-46d5-bd11-bda5950d210f",
|
|
|
|
|
"value": "36.236.9.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-19e8-4cae-8682-bda5950d210f",
|
|
|
|
|
"value": "36.237.211.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-3b24-4d05-9602-bda5950d210f",
|
|
|
|
|
"value": "36.237.36.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-fb68-44b5-abde-bda5950d210f",
|
|
|
|
|
"value": "36.237.90.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-5b40-4251-a141-bda5950d210f",
|
|
|
|
|
"value": "36.238.109.247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-1fbc-44d5-b363-bda5950d210f",
|
|
|
|
|
"value": "36.238.26.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-605c-409e-9b09-bda5950d210f",
|
|
|
|
|
"value": "36.238.49.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-7ce8-4bf8-aeb7-bda5950d210f",
|
|
|
|
|
"value": "36.238.61.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-e070-42fc-968c-bda5950d210f",
|
|
|
|
|
"value": "36.239.73.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-d828-4e4f-b31a-bda5950d210f",
|
|
|
|
|
"value": "36.24.28.87"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-0fd4-4223-ab6f-bda5950d210f",
|
|
|
|
|
"value": "36.32.105.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-9e7c-4edd-b622-bda5950d210f",
|
|
|
|
|
"value": "36.39.225.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-8308-4f7c-add4-bda5950d210f",
|
|
|
|
|
"value": "37.112.49.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-7f88-4a07-8591-bda5950d210f",
|
|
|
|
|
"value": "37.191.134.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-1530-4b8f-8abd-bda5950d210f",
|
|
|
|
|
"value": "37.191.139.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-3b78-4e96-9500-bda5950d210f",
|
|
|
|
|
"value": "37.229.73.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-b4ac-4855-9a67-bda5950d210f",
|
|
|
|
|
"value": "37.72.50.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-4078-4e21-affe-bda5950d210f",
|
|
|
|
|
"value": "39.68.115.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-5884-4cf2-91f5-bda5950d210f",
|
|
|
|
|
"value": "42.115.224.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-0294-4f42-9293-bda5950d210f",
|
|
|
|
|
"value": "42.119.239.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-34a4-4416-b66f-bda5950d210f",
|
|
|
|
|
"value": "42.2.14.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-0e40-4ae5-bde7-bda5950d210f",
|
|
|
|
|
"value": "42.2.156.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-7fd8-4e2d-8612-bda5950d210f",
|
|
|
|
|
"value": "42.2.182.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-4d74-47eb-8689-bda5950d210f",
|
|
|
|
|
"value": "42.2.255.89"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-9700-4115-8d90-bda5950d210f",
|
|
|
|
|
"value": "42.2.86.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-e410-4e40-9a9b-bda5950d210f",
|
|
|
|
|
"value": "42.227.185.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-46e4-445e-a46b-bda5950d210f",
|
|
|
|
|
"value": "42.230.204.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-a3e4-4dad-98e9-bda5950d210f",
|
|
|
|
|
"value": "42.239.124.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-916c-40d1-aba8-bda5950d210f",
|
|
|
|
|
"value": "42.239.238.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-afa4-4a54-98b7-bda5950d210f",
|
|
|
|
|
"value": "42.3.156.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-c014-4dee-8fcf-bda5950d210f",
|
|
|
|
|
"value": "42.3.82.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-a47c-49b5-9d22-bda5950d210f",
|
|
|
|
|
"value": "42.98.108.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-79a8-44aa-844e-bda5950d210f",
|
|
|
|
|
"value": "42.98.179.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-288c-40ed-a354-bda5950d210f",
|
|
|
|
|
"value": "42.98.218.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-59e8-4ed3-ab66-bda5950d210f",
|
|
|
|
|
"value": "42.98.221.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-4a64-44fd-b73f-bda5950d210f",
|
|
|
|
|
"value": "42.98.51.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-8a34-4f96-af42-bda5950d210f",
|
|
|
|
|
"value": "43.243.142.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-1298-4d24-8a2f-bda5950d210f",
|
|
|
|
|
"value": "45.124.48.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624858",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05a-f210-481b-a0d1-bda5950d210f",
|
|
|
|
|
"value": "45.224.164.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-a90c-4c76-857b-bda5950d210f",
|
|
|
|
|
"value": "45.228.214.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-7490-4cca-abb0-bda5950d210f",
|
|
|
|
|
"value": "45.228.215.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-96f8-49e2-a12d-bda5950d210f",
|
|
|
|
|
"value": "45.228.253.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-b290-49c3-aafd-bda5950d210f",
|
|
|
|
|
"value": "45.44.49.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-52b0-4d08-9504-bda5950d210f",
|
|
|
|
|
"value": "45.74.103.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-e090-4c7b-94e9-bda5950d210f",
|
|
|
|
|
"value": "45.84.187.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-7098-47db-ba9a-bda5950d210f",
|
|
|
|
|
"value": "46.109.197.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-c120-4c57-8d14-bda5950d210f",
|
|
|
|
|
"value": "46.173.4.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-1c90-4093-8570-bda5950d210f",
|
|
|
|
|
"value": "46.185.86.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-50e0-4de9-9db9-bda5950d210f",
|
|
|
|
|
"value": "46.72.128.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-4eac-4c1e-b19f-bda5950d210f",
|
|
|
|
|
"value": "46.72.145.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-9c30-4bdb-b29b-bda5950d210f",
|
|
|
|
|
"value": "46.73.124.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-67a0-4ca0-bba8-bda5950d210f",
|
|
|
|
|
"value": "49.113.247.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-24f0-4602-bf8e-bda5950d210f",
|
|
|
|
|
"value": "49.147.129.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-d0ac-4201-88bd-bda5950d210f",
|
|
|
|
|
"value": "49.158.197.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-a760-480f-90e0-bda5950d210f",
|
|
|
|
|
"value": "49.159.93.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-461c-493d-b50c-bda5950d210f",
|
|
|
|
|
"value": "49.207.178.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-69a8-473e-befe-bda5950d210f",
|
|
|
|
|
"value": "49.213.161.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-80d8-45b6-bf69-bda5950d210f",
|
|
|
|
|
"value": "49.213.171.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-2850-4958-9d69-bda5950d210f",
|
|
|
|
|
"value": "49.213.178.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-12b8-4c09-a6ba-bda5950d210f",
|
|
|
|
|
"value": "49.213.189.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-6cd8-4626-81ab-bda5950d210f",
|
|
|
|
|
"value": "49.213.193.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-c484-4446-842f-bda5950d210f",
|
|
|
|
|
"value": "49.213.194.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-f194-4757-8e41-bda5950d210f",
|
|
|
|
|
"value": "49.213.204.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-b214-4fe3-aa96-bda5950d210f",
|
|
|
|
|
"value": "49.246.3.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-a368-4ecb-bd51-bda5950d210f",
|
|
|
|
|
"value": "49.254.189.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-10d0-4072-bedf-bda5950d210f",
|
|
|
|
|
"value": "49.89.195.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-ea50-4e9f-9dd8-bda5950d210f",
|
|
|
|
|
"value": "5.165.80.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-d66c-41d0-beeb-bda5950d210f",
|
|
|
|
|
"value": "5.206.227.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-1628-449a-9eec-bda5950d210f",
|
|
|
|
|
"value": "5.227.136.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-9010-4e1a-8070-bda5950d210f",
|
|
|
|
|
"value": "5.248.63.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-5ebc-4ccd-a7df-bda5950d210f",
|
|
|
|
|
"value": "5.8.206.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-e438-42ec-b6bd-bda5950d210f",
|
|
|
|
|
"value": "58.152.135.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-4998-4985-a682-bda5950d210f",
|
|
|
|
|
"value": "58.152.156.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-92ec-4c54-9eca-bda5950d210f",
|
|
|
|
|
"value": "58.152.198.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-f8e8-453a-896e-bda5950d210f",
|
|
|
|
|
"value": "58.153.114.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-9da4-4fba-9379-bda5950d210f",
|
|
|
|
|
"value": "58.153.12.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-8480-4b3f-bc85-bda5950d210f",
|
|
|
|
|
"value": "58.153.20.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-ddd8-4894-a44d-bda5950d210f",
|
|
|
|
|
"value": "58.153.202.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-2494-4076-ac4c-bda5950d210f",
|
|
|
|
|
"value": "58.153.224.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-744c-41a4-859d-bda5950d210f",
|
|
|
|
|
"value": "58.153.225.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-c570-43cb-9a92-bda5950d210f",
|
|
|
|
|
"value": "58.153.7.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-c850-4cb2-9d79-bda5950d210f",
|
|
|
|
|
"value": "58.182.94.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-d74c-464b-8774-bda5950d210f",
|
|
|
|
|
"value": "58.212.110.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-6b34-48a9-93fb-bda5950d210f",
|
|
|
|
|
"value": "58.227.118.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-cff4-4207-9fad-bda5950d210f",
|
|
|
|
|
"value": "59.1.189.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-34e8-4bfe-9faa-bda5950d210f",
|
|
|
|
|
"value": "59.115.140.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-45d0-4e5b-996f-bda5950d210f",
|
|
|
|
|
"value": "59.115.170.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-addc-4c8a-91b1-bda5950d210f",
|
|
|
|
|
"value": "59.120.106.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-cc1c-4814-8c79-bda5950d210f",
|
|
|
|
|
"value": "59.125.65.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-f520-4659-bde9-bda5950d210f",
|
|
|
|
|
"value": "59.126.117.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624859",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05b-89fc-4b59-a26f-bda5950d210f",
|
|
|
|
|
"value": "59.126.129.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-729c-49eb-b40a-bda5950d210f",
|
|
|
|
|
"value": "59.126.164.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-0334-4f83-9606-bda5950d210f",
|
|
|
|
|
"value": "59.126.190.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-7a44-4531-93d2-bda5950d210f",
|
|
|
|
|
"value": "59.126.212.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-b868-40c7-ba68-bda5950d210f",
|
|
|
|
|
"value": "59.126.222.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-2424-441b-af08-bda5950d210f",
|
|
|
|
|
"value": "59.126.230.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-534c-445f-8d34-bda5950d210f",
|
|
|
|
|
"value": "59.126.54.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-468c-4f9c-a30b-bda5950d210f",
|
|
|
|
|
"value": "59.126.63.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-ccd0-4762-8e6e-bda5950d210f",
|
|
|
|
|
"value": "59.127.10.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-4358-47fe-afc1-bda5950d210f",
|
|
|
|
|
"value": "59.127.123.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-6bdc-437b-8a50-bda5950d210f",
|
|
|
|
|
"value": "59.127.171.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-0630-48a5-b432-bda5950d210f",
|
|
|
|
|
"value": "59.127.235.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-839c-4fc0-aa66-bda5950d210f",
|
|
|
|
|
"value": "59.127.250.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-6cd8-457c-adc5-bda5950d210f",
|
|
|
|
|
"value": "59.127.53.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-b718-4757-be8f-bda5950d210f",
|
|
|
|
|
"value": "59.127.53.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-8474-45c1-8dce-bda5950d210f",
|
|
|
|
|
"value": "59.127.74.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-6130-4828-9365-bda5950d210f",
|
|
|
|
|
"value": "59.127.85.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-ace4-403f-9b73-bda5950d210f",
|
|
|
|
|
"value": "59.14.56.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-91f8-4930-81d3-bda5950d210f",
|
|
|
|
|
"value": "59.17.178.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-c508-4399-bc05-bda5950d210f",
|
|
|
|
|
"value": "59.2.84.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-5784-4983-b6e3-bda5950d210f",
|
|
|
|
|
"value": "59.24.202.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-acac-4609-a383-bda5950d210f",
|
|
|
|
|
"value": "59.25.233.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-0f48-4a8a-a9c3-bda5950d210f",
|
|
|
|
|
"value": "59.29.168.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-3964-4a3b-b91d-bda5950d210f",
|
|
|
|
|
"value": "59.6.137.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-a53c-40b1-8f55-bda5950d210f",
|
|
|
|
|
"value": "59.9.117.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-58c0-491c-ad9c-bda5950d210f",
|
|
|
|
|
"value": "60.162.39.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-d9f0-46f2-aa56-bda5950d210f",
|
|
|
|
|
"value": "60.174.79.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-d384-4f27-a48a-bda5950d210f",
|
|
|
|
|
"value": "60.174.95.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-b1c8-47db-bd14-bda5950d210f",
|
|
|
|
|
"value": "60.246.163.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-98a4-4687-8a69-bda5950d210f",
|
|
|
|
|
"value": "60.248.158.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-4acc-455d-9e35-bda5950d210f",
|
|
|
|
|
"value": "60.248.242.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-2d5c-4845-8812-bda5950d210f",
|
|
|
|
|
"value": "60.249.143.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-2678-4ed5-a6b1-bda5950d210f",
|
|
|
|
|
"value": "60.249.177.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-6cac-45c2-8fb3-bda5950d210f",
|
|
|
|
|
"value": "60.251.182.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-40ac-4aac-9f45-bda5950d210f",
|
|
|
|
|
"value": "60.251.216.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-5d54-4160-bc25-bda5950d210f",
|
|
|
|
|
"value": "61.190.97.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-1a7c-4d8a-9f4d-bda5950d210f",
|
|
|
|
|
"value": "61.216.57.176"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-69a0-4506-94f6-bda5950d210f",
|
|
|
|
|
"value": "61.223.147.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-9c04-4794-a8b8-bda5950d210f",
|
|
|
|
|
"value": "61.223.166.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-1f0c-424b-a3f0-bda5950d210f",
|
|
|
|
|
"value": "61.223.54.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-4c64-4617-a49e-bda5950d210f",
|
|
|
|
|
"value": "61.224.2.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-f9c0-44e2-87db-bda5950d210f",
|
|
|
|
|
"value": "61.227.176.156"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-2098-4711-bf15-bda5950d210f",
|
|
|
|
|
"value": "61.227.232.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-c368-4a52-bdfd-bda5950d210f",
|
|
|
|
|
"value": "61.227.99.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-9a24-4a12-884f-bda5950d210f",
|
|
|
|
|
"value": "61.228.191.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-19bc-473e-9298-bda5950d210f",
|
|
|
|
|
"value": "61.230.1.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-5fd4-4a4b-868b-bda5950d210f",
|
|
|
|
|
"value": "61.230.115.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-5fb8-4825-99b8-bda5950d210f",
|
|
|
|
|
"value": "61.231.32.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-616c-4209-8610-bda5950d210f",
|
|
|
|
|
"value": "61.247.190.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-3338-4ba0-bf78-bda5950d210f",
|
|
|
|
|
"value": "61.57.220.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-9c94-445a-823b-bda5950d210f",
|
|
|
|
|
"value": "61.63.119.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-8ac8-4be6-9fb0-bda5950d210f",
|
|
|
|
|
"value": "61.73.8.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-ef98-4668-bd1d-bda5950d210f",
|
|
|
|
|
"value": "61.76.11.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-51d0-405f-972b-bda5950d210f",
|
|
|
|
|
"value": "61.80.66.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624860",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05c-dde8-4e0c-8e63-bda5950d210f",
|
|
|
|
|
"value": "61.84.247.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-b8cc-4f8d-accf-bda5950d210f",
|
|
|
|
|
"value": "61.93.109.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-9088-4f1f-8836-bda5950d210f",
|
|
|
|
|
"value": "64.110.92.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-7620-430c-85b4-bda5950d210f",
|
|
|
|
|
"value": "68.202.89.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-c564-4935-8b53-bda5950d210f",
|
|
|
|
|
"value": "69.118.243.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-0080-4233-a7e3-bda5950d210f",
|
|
|
|
|
"value": "70.226.21.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-a8a0-40d3-a8d5-bda5950d210f",
|
|
|
|
|
"value": "71.125.3.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-8d90-4d3f-b1b1-bda5950d210f",
|
|
|
|
|
"value": "74.78.82.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-855c-45c7-811a-bda5950d210f",
|
|
|
|
|
"value": "75.190.122.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-752c-4623-98ae-bda5950d210f",
|
|
|
|
|
"value": "77.106.106.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-59f0-4553-8f11-bda5950d210f",
|
|
|
|
|
"value": "77.181.21.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-01d8-47c2-9dd2-bda5950d210f",
|
|
|
|
|
"value": "77.234.20.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-f24c-401b-be94-bda5950d210f",
|
|
|
|
|
"value": "77.53.144.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-3f1c-494e-b46f-bda5950d210f",
|
|
|
|
|
"value": "77.79.133.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-5118-4ebb-86f2-bda5950d210f",
|
|
|
|
|
"value": "77.85.62.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-be90-4d6e-8c06-bda5950d210f",
|
|
|
|
|
"value": "77.87.170.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-0480-45b1-b771-bda5950d210f",
|
|
|
|
|
"value": "78.188.197.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-f458-4bb1-9a8f-bda5950d210f",
|
|
|
|
|
"value": "78.73.236.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-22a0-45c3-8394-bda5950d210f",
|
|
|
|
|
"value": "78.82.179.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-f618-4132-b83c-bda5950d210f",
|
|
|
|
|
"value": "78.85.49.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-8348-4884-80d9-bda5950d210f",
|
|
|
|
|
"value": "79.42.143.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-b128-4fcf-b8fb-bda5950d210f",
|
|
|
|
|
"value": "80.229.87.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-dea0-41a4-a152-bda5950d210f",
|
|
|
|
|
"value": "81.170.189.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-2990-44cd-af39-bda5950d210f",
|
|
|
|
|
"value": "81.198.9.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-e610-40b4-bf85-bda5950d210f",
|
|
|
|
|
"value": "81.22.132.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-3fa0-4c71-8a7b-bda5950d210f",
|
|
|
|
|
"value": "81.26.185.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-c9f8-401f-8126-bda5950d210f",
|
|
|
|
|
"value": "82.197.255.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-84f0-409c-93c5-bda5950d210f",
|
|
|
|
|
"value": "82.214.40.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-6cd4-44dd-9df7-bda5950d210f",
|
|
|
|
|
"value": "82.79.103.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05d-cbc0-49b9-bec1-bda5950d210f",
|
|
|
|
|
"value": "82.79.71.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-f004-4dfb-a5a8-bda5950d210f",
|
|
|
|
|
"value": "82.96.63.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-8f50-44d5-a672-bda5950d210f",
|
|
|
|
|
"value": "83.226.211.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-0490-4c37-a508-bda5950d210f",
|
|
|
|
|
"value": "83.233.13.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-7a00-42fa-9578-bda5950d210f",
|
|
|
|
|
"value": "83.233.2.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-a184-4976-887b-bda5950d210f",
|
|
|
|
|
"value": "84.210.234.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-1e30-4b80-88d9-bda5950d210f",
|
|
|
|
|
"value": "84.219.204.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-4144-4263-a43a-bda5950d210f",
|
|
|
|
|
"value": "84.94.209.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-09b8-428f-9045-bda5950d210f",
|
|
|
|
|
"value": "85.224.71.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-362c-46ed-ae8d-bda5950d210f",
|
|
|
|
|
"value": "85.225.127.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-3488-4a5a-b042-bda5950d210f",
|
|
|
|
|
"value": "85.225.156.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-2600-4233-8034-bda5950d210f",
|
|
|
|
|
"value": "85.245.174.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-53fc-4593-9724-bda5950d210f",
|
|
|
|
|
"value": "86.124.192.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-dd78-45ac-9379-bda5950d210f",
|
|
|
|
|
"value": "86.126.106.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-d2ec-4d44-895d-bda5950d210f",
|
|
|
|
|
"value": "86.238.210.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-5338-4241-910f-bda5950d210f",
|
|
|
|
|
"value": "87.1.111.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-48d8-48bd-b19a-bda5950d210f",
|
|
|
|
|
"value": "87.247.97.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-56cc-4af4-939e-bda5950d210f",
|
|
|
|
|
"value": "88.129.164.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-0950-4392-a3e4-bda5950d210f",
|
|
|
|
|
"value": "88.190.193.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-fcd0-4fd7-9de8-bda5950d210f",
|
|
|
|
|
"value": "88.201.193.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-2f98-4ae1-a4a3-bda5950d210f",
|
|
|
|
|
"value": "88.202.152.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-e714-4e3f-a90e-bda5950d210f",
|
|
|
|
|
"value": "88.248.14.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-fbd0-4b4c-b0ed-bda5950d210f",
|
|
|
|
|
"value": "88.249.31.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-cc0c-415f-b23d-bda5950d210f",
|
|
|
|
|
"value": "88.252.103.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-9884-4357-a796-bda5950d210f",
|
|
|
|
|
"value": "89.160.9.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-18b4-4d44-a3f0-bda5950d210f",
|
|
|
|
|
"value": "89.2.109.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-b620-4e94-bfcb-bda5950d210f",
|
|
|
|
|
"value": "89.205.126.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-2388-4f7e-842d-bda5950d210f",
|
|
|
|
|
"value": "89.208.122.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-021c-4ed3-a1c3-bda5950d210f",
|
|
|
|
|
"value": "89.208.30.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-3a88-44fd-af91-bda5950d210f",
|
|
|
|
|
"value": "89.208.30.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-97f4-43ad-beb9-bda5950d210f",
|
|
|
|
|
"value": "89.233.197.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-83f8-4045-b9c7-bda5950d210f",
|
|
|
|
|
"value": "90.154.172.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-ea50-40b4-a1f1-bda5950d210f",
|
|
|
|
|
"value": "90.154.209.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-5d70-428c-8a85-bda5950d210f",
|
|
|
|
|
"value": "91.126.198.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-1128-4533-afba-bda5950d210f",
|
|
|
|
|
"value": "91.126.206.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-16f0-43fd-98f9-bda5950d210f",
|
|
|
|
|
"value": "91.126.45.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-f990-47dd-8886-bda5950d210f",
|
|
|
|
|
"value": "91.164.238.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-8360-4961-b91a-bda5950d210f",
|
|
|
|
|
"value": "91.202.132.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-06f0-4a56-a0e8-bda5950d210f",
|
|
|
|
|
"value": "91.204.58.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-c21c-4645-9514-bda5950d210f",
|
|
|
|
|
"value": "91.224.129.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-ae5c-4dd4-a199-bda5950d210f",
|
|
|
|
|
"value": "91.228.37.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-c640-426e-9bdd-bda5950d210f",
|
|
|
|
|
"value": "91.246.215.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-8638-481b-b315-bda5950d210f",
|
|
|
|
|
"value": "92.81.163.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-babc-497d-8320-bda5950d210f",
|
|
|
|
|
"value": "93.159.184.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-578c-4f67-9e2d-bda5950d210f",
|
|
|
|
|
"value": "93.171.231.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-e690-446b-9de2-bda5950d210f",
|
|
|
|
|
"value": "93.41.206.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-a328-4f01-b83f-bda5950d210f",
|
|
|
|
|
"value": "93.79.100.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624862",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05e-e5ac-421f-901b-bda5950d210f",
|
|
|
|
|
"value": "94.154.18.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-6d00-4d91-97e6-bda5950d210f",
|
|
|
|
|
"value": "94.236.239.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-9628-4e93-baa7-bda5950d210f",
|
|
|
|
|
"value": "94.30.52.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-a580-4e71-9861-bda5950d210f",
|
|
|
|
|
"value": "95.220.239.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-2f8c-4e8a-8b7f-bda5950d210f",
|
|
|
|
|
"value": "95.239.180.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-c148-4b5c-9ebf-bda5950d210f",
|
|
|
|
|
"value": "95.28.58.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-b488-4374-9762-bda5950d210f",
|
|
|
|
|
"value": "95.62.145.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-de40-4d06-86b0-bda5950d210f",
|
|
|
|
|
"value": "95.68.84.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-7a08-461c-b92f-bda5950d210f",
|
|
|
|
|
"value": "95.86.38.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-0cc0-492e-8a65-bda5950d210f",
|
|
|
|
|
"value": "95.86.42.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-a964-417d-901c-bda5950d210f",
|
|
|
|
|
"value": "98.128.130.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582624863",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5e54f05f-0d00-4680-84ad-bda5950d210f",
|
|
|
|
|
"value": "98.249.231.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-a994-4163-b8cd-46c6950d210f",
|
|
|
|
|
"value": "ae975a5cdd9fb816a1e286e1a24d9144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-6764-4213-8544-4ca4950d210f",
|
|
|
|
|
"value": "0481cb0140cb9342b04634f3334b5eee"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-1a20-4ec0-8701-49c7950d210f",
|
|
|
|
|
"value": "9f0b3db7a93c9a8da821e22a6edf28f9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-b67c-4a38-a6f6-4754950d210f",
|
|
|
|
|
"value": "1fa587819808955f6697037d56932700"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-f99c-46cd-9980-4627950d210f",
|
|
|
|
|
"value": "8ff15bbc7d72277fee01088a19feac91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-f73c-453a-9d8f-47d4950d210f",
|
|
|
|
|
"value": "da40993e32a538d4a30c6399bbfa785d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-86cc-4e21-a5d3-4faf950d210f",
|
|
|
|
|
"value": "35518afc69086a6c8694936e3b5e5f86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-82ec-4042-83a6-4df6950d210f",
|
|
|
|
|
"value": "d0a7194be28ce86fd68f1cc4fb9f5d42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client and downloader payloads",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625731",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5e54f3c3-3f00-457a-9d96-4680950d210f",
|
|
|
|
|
"value": "59211fe2550c220b48472ebdcf60af89"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT C2 and payload spreading servers in IP addresses",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625819",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e54f41b-c570-4721-821e-9723950d210f",
|
|
|
|
|
"value": "194.36.188.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT C2 and payload spreading servers in IP addresses",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e54f445-06c8-40f2-a5bd-9723950d210f",
|
|
|
|
|
"value": "194.180.224.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT C2 and payload spreading servers in IP addresses",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e54f445-fa34-47eb-9b55-9723950d210f",
|
|
|
|
|
"value": "5.252.179.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT C2 and payload spreading servers in IP addresses",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582625861",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e54f445-5cb8-443b-9c9b-9723950d210f",
|
|
|
|
|
"value": "45.58.123.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-4494-41c0-8e2c-4536950d210f",
|
|
|
|
|
"value": "bot.mips"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-6d10-4c71-9cec-47ed950d210f",
|
|
|
|
|
"value": "bot.arm4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-af38-4bc0-ac5b-4e79950d210f",
|
|
|
|
|
"value": "bot.arm5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-4608-4558-a8e3-4d04950d210f",
|
|
|
|
|
"value": "bot.arm7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-f91c-4108-aa57-4c0b950d210f",
|
|
|
|
|
"value": "bot.x86_64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-80c0-4a4c-982f-4bf7950d210f",
|
|
|
|
|
"value": "bot.x86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-2ffc-4de0-bd20-4e4c950d210f",
|
|
|
|
|
"value": "bot.mipsel"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "The FBOT botnet client filenames",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-19T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-24T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582626098",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "filename",
|
|
|
|
|
"uuid": "5e54f532-fdb0-40c8-8adc-46f9950d210f",
|
|
|
|
|
"value": "bot.ppc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Internal reference",
|
|
|
|
|
"comment": "Encryption explanation analysis",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1582626489",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5e54f6b9-7e84-476c-a5b8-bdb4950d210f",
|
|
|
|
|
"value": "https://blog.malwaremustdie.org/2020/01/mmd-0065-2020-linuxmirai-fbot.html"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Attribution",
|
|
|
|
|
"comment": "Alleged threat actor (or related to)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1582627219",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "threat-actor",
|
|
|
|
|
"uuid": "5e54f993-73c8-4593-8f03-49c8950d210f",
|
|
|
|
|
"value": "https://twitter.com/hwwhjejehfbbfkc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-9558-4812-a542-4498950d210f",
|
|
|
|
|
"value": "1.160.82.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-95f8-4eef-8da2-4a84950d210f",
|
|
|
|
|
"value": "1.169.215.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-9ba8-4c03-b572-4ae7950d210f",
|
|
|
|
|
"value": "1.34.233.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-c8b0-4536-95ac-4bb0950d210f",
|
|
|
|
|
"value": "103.220.90.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-9254-4277-a6ea-4aae950d210f",
|
|
|
|
|
"value": "111.165.147.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-f488-42a8-8e73-45be950d210f",
|
|
|
|
|
"value": "111.242.157.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-1830-4a9f-bcf6-4f66950d210f",
|
|
|
|
|
"value": "112.164.5.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-9c9c-44d9-8b26-4849950d210f",
|
|
|
|
|
"value": "112.186.91.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-dc3c-463b-a450-4593950d210f",
|
|
|
|
|
"value": "113.235.148.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-c690-4311-8511-458d950d210f",
|
|
|
|
|
"value": "113.77.10.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-3f9c-4b13-b7ec-4f2a950d210f",
|
|
|
|
|
"value": "114.200.63.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-ab24-4776-a166-4e45950d210f",
|
|
|
|
|
"value": "114.203.108.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-7dcc-42ec-8154-4041950d210f",
|
|
|
|
|
"value": "114.33.83.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-6544-49f3-b6ed-4dee950d210f",
|
|
|
|
|
"value": "114.34.47.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-70d0-4d05-bf89-42ab950d210f",
|
|
|
|
|
"value": "114.35.146.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-0d2c-4fc9-89e6-40dc950d210f",
|
|
|
|
|
"value": "114.40.185.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-8574-4e83-a0ef-40b0950d210f",
|
|
|
|
|
"value": "115.132.128.112"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-fab4-4275-a0e9-4e55950d210f",
|
|
|
|
|
"value": "115.55.94.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-e0ac-4daf-a877-44b5950d210f",
|
|
|
|
|
"value": "115.76.122.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-f184-4c0a-b6c0-453c950d210f",
|
|
|
|
|
"value": "116.120.115.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-cc70-4455-bd95-4f56950d210f",
|
|
|
|
|
"value": "116.193.134.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-c248-4086-bc76-4215950d210f",
|
|
|
|
|
"value": "117.13.63.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-ca84-46f6-bfa9-44d0950d210f",
|
|
|
|
|
"value": "118.141.40.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-e1e4-487b-9196-41a4950d210f",
|
|
|
|
|
"value": "118.165.135.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-60bc-4a69-ad8b-4aa2950d210f",
|
|
|
|
|
"value": "119.196.219.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-ddd4-4066-a829-4f8e950d210f",
|
|
|
|
|
"value": "119.236.116.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-24c8-4af2-8fa5-4268950d210f",
|
|
|
|
|
"value": "121.126.7.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b29-6084-4717-a7a7-4ec0950d210f",
|
|
|
|
|
"value": "121.128.237.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648105",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-8548-4a52-be2f-4f07950d210f",
|
|
|
|
|
"value": "121.141.105.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-9afc-446c-ab13-47bc950d210f",
|
|
|
|
|
"value": "121.162.225.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-3a58-440c-8c54-4bce950d210f",
|
|
|
|
|
"value": "121.162.72.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-d734-4c2a-9362-446d950d210f",
|
|
|
|
|
"value": "122.116.144.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-4370-48df-ad62-4fa3950d210f",
|
|
|
|
|
"value": "122.116.162.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-8e78-4268-8465-4e74950d210f",
|
|
|
|
|
"value": "122.117.22.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-1f64-4586-b936-415a950d210f",
|
|
|
|
|
"value": "123.10.128.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-8648-4b20-b769-4171950d210f",
|
|
|
|
|
"value": "123.110.188.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-1acc-4096-919e-4d60950d210f",
|
|
|
|
|
"value": "123.215.123.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-b970-44f9-9e48-4f7c950d210f",
|
|
|
|
|
"value": "123.248.120.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-48cc-408d-bf60-40e5950d210f",
|
|
|
|
|
"value": "14.40.91.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-c4d8-444d-ac55-44d0950d210f",
|
|
|
|
|
"value": "151.237.174.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-8110-450c-b43b-494a950d210f",
|
|
|
|
|
"value": "171.246.63.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-0314-4628-b6f8-4823950d210f",
|
|
|
|
|
"value": "180.93.70.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-6228-44af-a1b6-46b5950d210f",
|
|
|
|
|
"value": "182.114.252.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-557c-4b48-b791-4f41950d210f",
|
|
|
|
|
"value": "182.155.199.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-5100-44d7-b71b-4968950d210f",
|
|
|
|
|
"value": "182.19.157.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-9dc0-4c03-8a3d-439e950d210f",
|
|
|
|
|
"value": "183.80.107.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-af98-444a-b45e-4218950d210f",
|
|
|
|
|
"value": "186.113.75.175"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-11d4-4c70-bdf2-46c4950d210f",
|
|
|
|
|
"value": "189.89.15.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-87d8-445f-a8db-482e950d210f",
|
|
|
|
|
"value": "192.145.204.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-0d6c-4552-829c-4847950d210f",
|
|
|
|
|
"value": "200.71.68.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-d25c-4249-932b-49d3950d210f",
|
|
|
|
|
"value": "202.39.134.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-22e8-4612-84f0-4eda950d210f",
|
|
|
|
|
"value": "210.79.196.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-3a20-418b-a51b-4f24950d210f",
|
|
|
|
|
"value": "211.193.17.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-d5ac-4338-8cd7-4eac950d210f",
|
|
|
|
|
"value": "218.148.229.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-8c44-46d2-bb59-465b950d210f",
|
|
|
|
|
"value": "218.232.70.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-4500-4682-a867-43c1950d210f",
|
|
|
|
|
"value": "219.154.160.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-0fac-4cdd-babd-4dcf950d210f",
|
|
|
|
|
"value": "219.79.167.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-8eb4-47fc-a14c-42c1950d210f",
|
|
|
|
|
"value": "220.132.120.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-4938-4a95-acc0-4b71950d210f",
|
|
|
|
|
"value": "220.132.58.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-f5b4-46ce-976e-431a950d210f",
|
|
|
|
|
"value": "220.132.75.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-1cd0-462d-a0e5-42cc950d210f",
|
|
|
|
|
"value": "220.133.93.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-6800-4c18-ab0b-4cfc950d210f",
|
|
|
|
|
"value": "220.134.145.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-e5d4-4c7a-b935-411d950d210f",
|
|
|
|
|
"value": "220.134.3.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-c5fc-4859-9111-488e950d210f",
|
|
|
|
|
"value": "220.134.53.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-a710-4c8c-a630-49f7950d210f",
|
|
|
|
|
"value": "220.134.55.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-d520-472f-a580-412c950d210f",
|
|
|
|
|
"value": "220.134.77.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-942c-4e0a-bd60-4485950d210f",
|
|
|
|
|
"value": "220.135.154.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648106",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2a-63c4-4318-8d3f-437a950d210f",
|
|
|
|
|
"value": "220.135.154.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-177c-4515-9f30-4019950d210f",
|
|
|
|
|
"value": "220.83.138.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-f5a4-478b-9012-48df950d210f",
|
|
|
|
|
"value": "221.124.105.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-8e98-47c5-98d7-4b19950d210f",
|
|
|
|
|
"value": "222.142.206.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-04a4-4460-8dd7-4ac6950d210f",
|
|
|
|
|
"value": "222.212.84.176"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-42ec-4b3b-a588-46d2950d210f",
|
|
|
|
|
"value": "223.15.220.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-f5e4-46a8-8f6f-4ad5950d210f",
|
|
|
|
|
"value": "223.18.106.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-6868-4dbb-a7df-4a25950d210f",
|
|
|
|
|
"value": "23.30.116.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-cb1c-49eb-9bc1-407b950d210f",
|
|
|
|
|
"value": "31.168.114.51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-0c1c-407b-9b49-4142950d210f",
|
|
|
|
|
"value": "36.224.129.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-43a8-44e4-897c-42d2950d210f",
|
|
|
|
|
"value": "36.230.162.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-d918-4878-a606-4254950d210f",
|
|
|
|
|
"value": "36.231.125.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-2d44-4d8c-96d1-4c63950d210f",
|
|
|
|
|
"value": "37.191.192.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-39b4-4639-8678-409b950d210f",
|
|
|
|
|
"value": "39.114.89.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-8c40-4efd-8b66-4d5d950d210f",
|
|
|
|
|
"value": "42.237.7.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-1484-488c-af82-41e3950d210f",
|
|
|
|
|
"value": "42.239.167.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-716c-423a-80fe-49fa950d210f",
|
|
|
|
|
"value": "46.180.173.10"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-e32c-425c-975e-4822950d210f",
|
|
|
|
|
"value": "49.213.179.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-552c-483d-b85b-426a950d210f",
|
|
|
|
|
"value": "49.213.194.112"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-1b8c-4c09-9d45-4041950d210f",
|
|
|
|
|
"value": "49.213.195.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-9810-4c18-8bcc-43c9950d210f",
|
|
|
|
|
"value": "58.152.150.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-b3e8-49ef-b4d7-49cf950d210f",
|
|
|
|
|
"value": "58.153.243.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-aee0-4d37-b1fd-4ea0950d210f",
|
|
|
|
|
"value": "58.177.174.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-2d90-430a-b702-4ca0950d210f",
|
|
|
|
|
"value": "58.252.176.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-cc04-4666-9ecf-49e7950d210f",
|
|
|
|
|
"value": "59.126.80.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-5ba0-483b-bc4a-4665950d210f",
|
|
|
|
|
"value": "59.127.203.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-80d0-4345-8cc3-4d52950d210f",
|
|
|
|
|
"value": "59.127.78.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-7cd0-4787-8c69-4b3a950d210f",
|
|
|
|
|
"value": "59.15.203.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-ca94-49d3-929e-43fe950d210f",
|
|
|
|
|
"value": "61.219.157.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-5bd4-481a-871f-4302950d210f",
|
|
|
|
|
"value": "61.230.196.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-4ba4-4607-97b9-4d89950d210f",
|
|
|
|
|
"value": "61.65.225.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-d9c4-4602-b19a-4b15950d210f",
|
|
|
|
|
"value": "70.81.160.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-6544-4339-9907-46fa950d210f",
|
|
|
|
|
"value": "74.101.225.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-53cc-423e-8d9a-4e79950d210f",
|
|
|
|
|
"value": "75.83.92.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-199c-4db4-85eb-4353950d210f",
|
|
|
|
|
"value": "77.109.188.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-fa0c-4d7e-97c7-4098950d210f",
|
|
|
|
|
"value": "78.186.50.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-2978-440c-8afd-4935950d210f",
|
|
|
|
|
"value": "78.85.36.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-97d8-4536-ad40-4152950d210f",
|
|
|
|
|
"value": "79.165.254.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-7efc-43d7-bdb2-495f950d210f",
|
|
|
|
|
"value": "81.214.15.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-12b8-4415-b20f-4c08950d210f",
|
|
|
|
|
"value": "85.228.104.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-decc-4add-9045-4ce8950d210f",
|
|
|
|
|
"value": "88.250.65.10"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-25T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582648107",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e554b2b-46bc-4087-b68d-457c950d210f",
|
|
|
|
|
"value": "89.147.112.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT C2 and payload spreading servers in IP addresses",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-09T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-15T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582649380",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e555024-128c-40b6-b8a5-4e97950d210f",
|
|
|
|
|
"value": "188.209.49.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-276c-4a19-b296-6b4a950d210f",
|
|
|
|
|
"value": "1.162.128.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-d968-466f-be77-6b4a950d210f",
|
|
|
|
|
"value": "1.173.163.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-29e0-446d-a4af-6b4a950d210f",
|
|
|
|
|
"value": "1.34.209.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-262c-4c87-b44e-6b4a950d210f",
|
|
|
|
|
"value": "103.120.118.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-253c-4d24-8198-6b4a950d210f",
|
|
|
|
|
"value": "103.129.33.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-32d8-457a-a10f-6b4a950d210f",
|
|
|
|
|
"value": "111.251.26.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-b260-4ea7-89d1-6b4a950d210f",
|
|
|
|
|
"value": "111.91.64.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-a310-4455-b074-6b4a950d210f",
|
|
|
|
|
"value": "112.157.106.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-b924-470d-af07-6b4a950d210f",
|
|
|
|
|
"value": "112.165.213.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-9f80-4047-b075-6b4a950d210f",
|
|
|
|
|
"value": "112.187.190.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-f56c-4647-89be-6b4a950d210f",
|
|
|
|
|
"value": "113.182.14.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-8588-4e9d-b285-6b4a950d210f",
|
|
|
|
|
"value": "113.183.140.10"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-e988-4d94-bd07-6b4a950d210f",
|
|
|
|
|
"value": "113.23.99.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733981",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9d-7ef8-4822-a95a-6b4a950d210f",
|
|
|
|
|
"value": "113.25.56.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-9490-49e0-ac38-6b4a950d210f",
|
|
|
|
|
"value": "114.33.129.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-0498-40dd-8661-6b4a950d210f",
|
|
|
|
|
"value": "114.34.89.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-b1f4-429b-b51b-6b4a950d210f",
|
|
|
|
|
"value": "114.35.131.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-a908-465d-afd4-6b4a950d210f",
|
|
|
|
|
"value": "114.35.166.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-db98-4061-bb6c-6b4a950d210f",
|
|
|
|
|
"value": "114.35.32.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-6390-43f1-b3b9-6b4a950d210f",
|
|
|
|
|
"value": "114.37.0.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-a1d8-4825-b453-6b4a950d210f",
|
|
|
|
|
"value": "114.47.124.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-3034-4c38-98e9-6b4a950d210f",
|
|
|
|
|
"value": "115.23.181.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-db9c-4565-83f5-6b4a950d210f",
|
|
|
|
|
"value": "115.58.143.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-e9bc-4316-b2bb-6b4a950d210f",
|
|
|
|
|
"value": "115.77.115.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-b2f0-4f1e-bfd9-6b4a950d210f",
|
|
|
|
|
"value": "117.0.100.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-0d08-4a0c-a1c9-6b4a950d210f",
|
|
|
|
|
"value": "117.2.190.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-a3a0-4753-a377-6b4a950d210f",
|
|
|
|
|
"value": "118.161.76.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-98d4-45f6-a39f-6b4a950d210f",
|
|
|
|
|
"value": "118.163.182.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-c994-4432-b69f-6b4a950d210f",
|
|
|
|
|
"value": "118.34.10.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-8648-46d8-a3ca-6b4a950d210f",
|
|
|
|
|
"value": "118.37.225.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-1c64-4e85-8703-6b4a950d210f",
|
|
|
|
|
"value": "119.237.192.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-2d7c-4d0a-984a-6b4a950d210f",
|
|
|
|
|
"value": "121.146.30.121"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-6654-4f9b-b38c-6b4a950d210f",
|
|
|
|
|
"value": "121.152.127.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-7480-43c8-b798-6b4a950d210f",
|
|
|
|
|
"value": "121.154.62.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-6174-420f-8b56-6b4a950d210f",
|
|
|
|
|
"value": "121.237.250.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-e620-46c4-ad71-6b4a950d210f",
|
|
|
|
|
"value": "122.116.115.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-6dd0-4df1-bf79-6b4a950d210f",
|
|
|
|
|
"value": "122.116.164.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-1204-44b0-8777-6b4a950d210f",
|
|
|
|
|
"value": "122.116.172.51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-47a4-47d5-8e0d-6b4a950d210f",
|
|
|
|
|
"value": "122.117.100.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-19f0-4086-b2f3-6b4a950d210f",
|
|
|
|
|
"value": "122.117.177.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-9bc4-48c4-94df-6b4a950d210f",
|
|
|
|
|
"value": "122.117.28.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-4f40-410c-a78c-6b4a950d210f",
|
|
|
|
|
"value": "123.110.33.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-a694-4742-8284-6b4a950d210f",
|
|
|
|
|
"value": "123.110.42.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-0d14-44dc-8bd4-6b4a950d210f",
|
|
|
|
|
"value": "123.195.85.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-8e08-42be-8b54-6b4a950d210f",
|
|
|
|
|
"value": "123.240.182.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-6f54-48c4-ac57-6b4a950d210f",
|
|
|
|
|
"value": "125.130.223.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-81f0-49ef-9fa9-6b4a950d210f",
|
|
|
|
|
"value": "125.133.13.201"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-90b8-4dd7-be22-6b4a950d210f",
|
|
|
|
|
"value": "125.138.112.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-f0b8-4a90-a23c-6b4a950d210f",
|
|
|
|
|
"value": "125.227.148.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-c50c-4fba-94e5-6b4a950d210f",
|
|
|
|
|
"value": "125.230.226.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-bbd8-4bba-a402-6b4a950d210f",
|
|
|
|
|
"value": "138.94.53.252"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-cb84-4dfd-a54e-6b4a950d210f",
|
|
|
|
|
"value": "150.117.30.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-a364-428e-bf3e-6b4a950d210f",
|
|
|
|
|
"value": "151.177.48.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-cbb4-44c0-8261-6b4a950d210f",
|
|
|
|
|
"value": "151.51.171.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-c4f8-4782-8a94-6b4a950d210f",
|
|
|
|
|
"value": "153.192.163.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-89bc-49be-9695-6b4a950d210f",
|
|
|
|
|
"value": "153.208.203.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-9a4c-4983-a98a-6b4a950d210f",
|
|
|
|
|
"value": "167.249.105.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-6ee8-4700-8978-6b4a950d210f",
|
|
|
|
|
"value": "171.226.45.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9e-304c-445a-b103-6b4a950d210f",
|
|
|
|
|
"value": "171.233.241.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733982",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-a324-4d28-bc14-6b4a950d210f",
|
|
|
|
|
"value": "171.237.153.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-498c-4c86-9e63-6b4a950d210f",
|
|
|
|
|
"value": "171.242.175.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-3f1c-419c-b295-6b4a950d210f",
|
|
|
|
|
"value": "171.38.146.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-7f18-4fe9-9466-6b4a950d210f",
|
|
|
|
|
"value": "175.11.51.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-cb04-4ca1-ad75-6b4a950d210f",
|
|
|
|
|
"value": "175.211.85.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-8ae0-45be-8dc2-6b4a950d210f",
|
|
|
|
|
"value": "176.192.171.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-ff98-404f-a407-6b4a950d210f",
|
|
|
|
|
"value": "177.73.173.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-5dc8-49ff-8be7-6b4a950d210f",
|
|
|
|
|
"value": "180.176.180.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-fdbc-4386-8c2b-6b4a950d210f",
|
|
|
|
|
"value": "182.155.182.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-3c28-4837-9378-6b4a950d210f",
|
|
|
|
|
"value": "182.155.98.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-16bc-4d26-b20f-6b4a950d210f",
|
|
|
|
|
"value": "182.74.69.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-2ee4-44db-a07f-6b4a950d210f",
|
|
|
|
|
"value": "183.109.99.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-e534-4f1e-afd6-6b4a950d210f",
|
|
|
|
|
"value": "183.145.209.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-9fec-4b8f-9ca0-6b4a950d210f",
|
|
|
|
|
"value": "188.230.186.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-5b94-430c-a1ec-6b4a950d210f",
|
|
|
|
|
"value": "188.242.88.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-b8e8-49f6-86a4-6b4a950d210f",
|
|
|
|
|
"value": "195.206.60.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-3aa4-4e22-a503-6b4a950d210f",
|
|
|
|
|
"value": "202.66.164.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-e780-4dc4-9e56-6b4a950d210f",
|
|
|
|
|
"value": "203.222.13.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-62cc-4740-ae45-6b4a950d210f",
|
|
|
|
|
"value": "210.16.112.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-454c-423e-a22f-6b4a950d210f",
|
|
|
|
|
"value": "210.209.152.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-abac-4e3d-988e-6b4a950d210f",
|
|
|
|
|
"value": "211.20.224.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-9ae8-41b4-a78e-6b4a950d210f",
|
|
|
|
|
"value": "211.22.165.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569a9f-66d0-4742-b60a-6b4a950d210f",
|
|
|
|
|
"value": "211.230.209.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733983",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-4790-43bb-bcc2-6b4a950d210f",
|
|
|
|
|
"value": "217.175.0.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-6290-48d4-b111-6b4a950d210f",
|
|
|
|
|
"value": "218.166.150.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-37d0-41c8-bd18-6b4a950d210f",
|
|
|
|
|
"value": "219.119.75.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-b6d8-4f8e-882a-6b4a950d210f",
|
|
|
|
|
"value": "220.123.146.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-9650-4e66-8b3d-6b4a950d210f",
|
|
|
|
|
"value": "220.124.100.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-16dc-4f19-b9c0-6b4a950d210f",
|
|
|
|
|
"value": "220.127.231.89"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-8b28-4afb-9587-6b4a950d210f",
|
|
|
|
|
"value": "220.129.4.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-ceec-431d-90e0-6b4a950d210f",
|
|
|
|
|
"value": "220.132.134.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-89c0-4fce-8019-6b4a950d210f",
|
|
|
|
|
"value": "220.132.164.249"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-4ab8-4c15-9a17-6b4a950d210f",
|
|
|
|
|
"value": "220.132.252.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-1cbc-4c68-9b8d-6b4a950d210f",
|
|
|
|
|
"value": "220.133.175.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-3810-4cc6-917b-6b4a950d210f",
|
|
|
|
|
"value": "220.134.104.224"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-31b8-4623-96ba-6b4a950d210f",
|
|
|
|
|
"value": "220.134.171.87"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-0320-4efe-b79e-6b4a950d210f",
|
|
|
|
|
"value": "220.134.175.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-371c-4d47-8102-6b4a950d210f",
|
|
|
|
|
"value": "220.134.189.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-c84c-42cf-acd7-6b4a950d210f",
|
|
|
|
|
"value": "220.134.57.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-3378-49fb-b5a7-6b4a950d210f",
|
|
|
|
|
"value": "220.135.94.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-de00-467a-81a0-6b4a950d210f",
|
|
|
|
|
"value": "220.77.20.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-d42c-401a-b8f9-6b4a950d210f",
|
|
|
|
|
"value": "222.236.122.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-9854-4242-80e2-6b4a950d210f",
|
|
|
|
|
"value": "223.18.155.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-b2ac-49e0-8967-6b4a950d210f",
|
|
|
|
|
"value": "27.105.130.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-c268-4be9-b132-6b4a950d210f",
|
|
|
|
|
"value": "36.224.211.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-5730-47fb-b5d5-6b4a950d210f",
|
|
|
|
|
"value": "36.228.254.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-3b88-453c-b8bf-6b4a950d210f",
|
|
|
|
|
"value": "36.230.241.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-bf6c-4bc8-834a-6b4a950d210f",
|
|
|
|
|
"value": "36.233.205.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-5394-4ffc-8930-6b4a950d210f",
|
|
|
|
|
"value": "36.238.100.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-ba50-45cd-8370-6b4a950d210f",
|
|
|
|
|
"value": "36.238.71.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-7634-4c5f-b000-6b4a950d210f",
|
|
|
|
|
"value": "42.116.175.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-54a8-4774-ac55-6b4a950d210f",
|
|
|
|
|
"value": "45.113.156.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-6a38-4ab9-9248-6b4a950d210f",
|
|
|
|
|
"value": "45.174.234.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-5f78-4c4f-a77f-6b4a950d210f",
|
|
|
|
|
"value": "50.194.44.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-6ccc-4485-9328-6b4a950d210f",
|
|
|
|
|
"value": "58.126.108.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-3d60-4b6c-9010-6b4a950d210f",
|
|
|
|
|
"value": "58.152.147.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-c258-4ea0-87e0-6b4a950d210f",
|
|
|
|
|
"value": "59.127.101.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-6368-49b2-8622-6b4a950d210f",
|
|
|
|
|
"value": "59.8.170.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-9b10-4318-bec0-6b4a950d210f",
|
|
|
|
|
"value": "61.216.133.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-9d90-46f8-91a0-6b4a950d210f",
|
|
|
|
|
"value": "61.216.152.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-8df0-429b-9df1-6b4a950d210f",
|
|
|
|
|
"value": "61.216.171.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-0b04-41ab-b322-6b4a950d210f",
|
|
|
|
|
"value": "61.219.184.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733984",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa0-4398-4067-8d19-6b4a950d210f",
|
|
|
|
|
"value": "61.221.42.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733985",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa1-c4d0-4c78-9181-6b4a950d210f",
|
|
|
|
|
"value": "61.231.15.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733985",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa1-bd10-44aa-a163-6b4a950d210f",
|
|
|
|
|
"value": "61.231.177.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733985",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa1-e200-4ae1-9a5a-6b4a950d210f",
|
|
|
|
|
"value": "78.132.182.121"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733985",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa1-1658-4fad-b959-6b4a950d210f",
|
|
|
|
|
"value": "85.225.26.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733985",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa1-6f00-4f03-99b4-6b4a950d210f",
|
|
|
|
|
"value": "91.207.87.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-26T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582733985",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e569aa1-021c-4ed6-8954-6b4a950d210f",
|
|
|
|
|
"value": "95.32.235.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT C2 and payload spreading servers in IP addresses",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-10T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-17T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582751651",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e56dfa3-5c94-4472-89bd-4d65950d210f",
|
|
|
|
|
"value": "185.183.96.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58354f-dd48-46fa-9f40-1c50950d210f",
|
|
|
|
|
"value": "1.34.127.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-91b8-4d5b-a4da-1c50950d210f",
|
|
|
|
|
"value": "109.111.172.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-9b9c-4512-bc22-1c50950d210f",
|
|
|
|
|
"value": "112.187.211.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-0428-4141-81b3-1c50950d210f",
|
|
|
|
|
"value": "114.32.145.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-f430-48b3-bb50-1c50950d210f",
|
|
|
|
|
"value": "114.32.212.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-c950-494b-a951-1c50950d210f",
|
|
|
|
|
"value": "114.32.232.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-72b0-45f5-adda-1c50950d210f",
|
|
|
|
|
"value": "114.32.35.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-99fc-4088-a55e-1c50950d210f",
|
|
|
|
|
"value": "114.32.47.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-c97c-42cc-97be-1c50950d210f",
|
|
|
|
|
"value": "114.33.14.176"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-d5a0-4589-aeaf-1c50950d210f",
|
|
|
|
|
"value": "115.73.109.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-0048-45a0-8aa0-1c50950d210f",
|
|
|
|
|
"value": "115.76.229.156"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-46c8-44d0-84d2-1c50950d210f",
|
|
|
|
|
"value": "116.104.32.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-15e0-47da-9f83-1c50950d210f",
|
|
|
|
|
"value": "116.107.19.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-ddb8-4101-a8a1-1c50950d210f",
|
|
|
|
|
"value": "116.98.40.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-48d8-4c8a-9acd-1c50950d210f",
|
|
|
|
|
"value": "118.161.134.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-18e4-4e92-89bf-1c50950d210f",
|
|
|
|
|
"value": "118.36.121.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-7d8c-46a0-9df0-1c50950d210f",
|
|
|
|
|
"value": "118.69.133.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-575c-4c52-b319-1c50950d210f",
|
|
|
|
|
"value": "121.121.88.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-fe30-4b0b-8d63-1c50950d210f",
|
|
|
|
|
"value": "121.134.224.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-d6c4-489e-95b8-1c50950d210f",
|
|
|
|
|
"value": "121.162.97.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-3bc8-492f-b848-1c50950d210f",
|
|
|
|
|
"value": "122.117.86.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-7638-48a0-85c1-1c50950d210f",
|
|
|
|
|
"value": "122.118.99.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-7b24-43d5-a897-1c50950d210f",
|
|
|
|
|
"value": "123.20.14.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-7114-4281-bee6-1c50950d210f",
|
|
|
|
|
"value": "125.227.81.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-1e1c-4822-b5cd-1c50950d210f",
|
|
|
|
|
"value": "14.169.164.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-330c-4e6d-b345-1c50950d210f",
|
|
|
|
|
"value": "14.246.231.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-950c-4560-9645-1c50950d210f",
|
|
|
|
|
"value": "171.235.196.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-7f7c-4aea-a5f0-1c50950d210f",
|
|
|
|
|
"value": "171.242.31.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-a274-4f2d-966e-1c50950d210f",
|
|
|
|
|
"value": "171.242.73.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-dcb8-4198-bce8-1c50950d210f",
|
|
|
|
|
"value": "171.247.79.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-cd20-42f6-bf9d-1c50950d210f",
|
|
|
|
|
"value": "177.54.178.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-6954-4cd5-ac38-1c50950d210f",
|
|
|
|
|
"value": "178.44.126.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-db18-481e-964f-1c50950d210f",
|
|
|
|
|
"value": "179.49.71.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-834c-4f6a-a3ec-1c50950d210f",
|
|
|
|
|
"value": "183.177.148.224"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-227c-4885-95eb-1c50950d210f",
|
|
|
|
|
"value": "183.96.36.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-3838-458b-9bc9-1c50950d210f",
|
|
|
|
|
"value": "190.7.113.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-dd34-45e9-8f69-1c50950d210f",
|
|
|
|
|
"value": "2.47.208.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-a0c4-4a6c-8767-1c50950d210f",
|
|
|
|
|
"value": "211.224.244.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-ee80-4d5f-996e-1c50950d210f",
|
|
|
|
|
"value": "212.225.189.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-ef08-4abc-a7da-1c50950d210f",
|
|
|
|
|
"value": "219.77.140.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-2db0-4e95-82cd-1c50950d210f",
|
|
|
|
|
"value": "220.133.241.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-d2e0-479d-b69e-1c50950d210f",
|
|
|
|
|
"value": "220.134.225.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-2f04-4ee9-be06-1c50950d210f",
|
|
|
|
|
"value": "220.134.30.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355a-12d8-4ebe-a5e7-1c50950d210f",
|
|
|
|
|
"value": "27.105.131.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-1e44-4b8d-b29f-1c50950d210f",
|
|
|
|
|
"value": "27.76.214.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-8a6c-42e1-9f51-1c50950d210f",
|
|
|
|
|
"value": "36.224.194.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-4e9c-4d9f-b0e8-1c50950d210f",
|
|
|
|
|
"value": "36.232.78.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-deb4-4027-8a2c-1c50950d210f",
|
|
|
|
|
"value": "36.233.42.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-56a8-42d5-8277-1c50950d210f",
|
|
|
|
|
"value": "42.239.142.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-f744-4454-886f-1c50950d210f",
|
|
|
|
|
"value": "49.207.180.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-c49c-407e-8eb0-1c50950d210f",
|
|
|
|
|
"value": "58.186.16.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-b8d8-45c3-b93e-1c50950d210f",
|
|
|
|
|
"value": "59.120.224.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-11d8-4bab-abbc-1c50950d210f",
|
|
|
|
|
"value": "59.125.6.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-d4dc-46e8-acc7-1c50950d210f",
|
|
|
|
|
"value": "59.126.254.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-b068-484f-abb5-1c50950d210f",
|
|
|
|
|
"value": "59.127.183.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-88fc-493c-bde0-1c50950d210f",
|
|
|
|
|
"value": "59.25.233.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-1ee8-40a3-8aaf-1c50950d210f",
|
|
|
|
|
"value": "60.17.116.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-84ec-4ffe-8ddc-1c50950d210f",
|
|
|
|
|
"value": "60.250.140.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-1ea4-45b1-acd6-1c50950d210f",
|
|
|
|
|
"value": "60.250.48.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-d26c-4bdf-b541-1c50950d210f",
|
|
|
|
|
"value": "61.52.78.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-a40c-4e64-8f55-1c50950d210f",
|
|
|
|
|
"value": "61.77.131.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-8588-4fa0-a566-1c50950d210f",
|
|
|
|
|
"value": "76.98.179.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-259c-4661-93bb-1c50950d210f",
|
|
|
|
|
"value": "94.236.239.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-676c-4d9a-9b02-1c50950d210f",
|
|
|
|
|
"value": "95.86.40.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-8b2c-4231-b3fb-1c50950d210f",
|
|
|
|
|
"value": "96.37.48.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-27T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582839131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58355b-a0f0-4314-b079-1c50950d210f",
|
|
|
|
|
"value": "99.29.230.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890339",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd63-f0fc-4e72-bd6e-462f950d210f",
|
|
|
|
|
"value": "1.34.110.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-5960-4a2a-93f7-41eb950d210f",
|
|
|
|
|
"value": "1.53.61.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-b5fc-41ac-94e6-4246950d210f",
|
|
|
|
|
"value": "103.104.112.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-e294-4857-a99b-4f68950d210f",
|
|
|
|
|
"value": "103.105.108.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-ad34-4ca7-aadc-4088950d210f",
|
|
|
|
|
"value": "103.235.167.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-05fc-4f3c-a824-4c31950d210f",
|
|
|
|
|
"value": "112.192.128.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-f0c0-4770-bdcb-4304950d210f",
|
|
|
|
|
"value": "113.162.253.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-7260-4efb-abdf-4737950d210f",
|
|
|
|
|
"value": "113.181.171.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-ece0-4213-a362-40f9950d210f",
|
|
|
|
|
"value": "114.32.80.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-3d60-4e23-bdbe-4bb5950d210f",
|
|
|
|
|
"value": "114.33.200.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-92ac-4861-80fe-4d29950d210f",
|
|
|
|
|
"value": "114.35.4.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-f8a0-450f-baea-411e950d210f",
|
|
|
|
|
"value": "114.46.130.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-0a78-4b7c-8eaf-4d87950d210f",
|
|
|
|
|
"value": "115.77.165.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-9e54-488f-a788-4d91950d210f",
|
|
|
|
|
"value": "116.104.38.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-2b34-4066-8dd5-45dc950d210f",
|
|
|
|
|
"value": "116.55.78.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-7794-4e28-841d-4073950d210f",
|
|
|
|
|
"value": "118.34.232.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-1df4-4d49-94b9-4ab8950d210f",
|
|
|
|
|
"value": "118.99.137.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-719c-4e8d-ba87-460f950d210f",
|
|
|
|
|
"value": "122.117.249.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-6ab4-4ab2-bd92-4e93950d210f",
|
|
|
|
|
"value": "123.11.3.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-42a4-4505-a2de-49eb950d210f",
|
|
|
|
|
"value": "125.24.173.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-cfbc-4504-beb7-47ef950d210f",
|
|
|
|
|
"value": "125.42.234.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-d07c-4ab1-980d-48fa950d210f",
|
|
|
|
|
"value": "14.176.169.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-5d6c-4390-91f1-4b4c950d210f",
|
|
|
|
|
"value": "14.227.248.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-9590-47b1-8c0b-4fe7950d210f",
|
|
|
|
|
"value": "14.242.79.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-892c-467c-9fd6-4c82950d210f",
|
|
|
|
|
"value": "14.244.63.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-0bec-4b2f-9c85-469d950d210f",
|
|
|
|
|
"value": "14.252.248.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-2fb8-499e-9d3a-45bd950d210f",
|
|
|
|
|
"value": "153.156.95.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-6e10-4a10-8e15-4f46950d210f",
|
|
|
|
|
"value": "153.191.184.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-b7a4-4861-a526-4ef0950d210f",
|
|
|
|
|
"value": "153.36.150.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-68c4-4318-8fee-409f950d210f",
|
|
|
|
|
"value": "171.235.222.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-38dc-4a80-89a4-4586950d210f",
|
|
|
|
|
"value": "171.248.58.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-d8f0-47c6-82d9-4fee950d210f",
|
|
|
|
|
"value": "171.253.59.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-5934-420f-9d8f-4287950d210f",
|
|
|
|
|
"value": "171.38.193.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-8940-4e58-8b1e-4e20950d210f",
|
|
|
|
|
"value": "175.124.88.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890340",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd64-e66c-4cb3-8d7c-4890950d210f",
|
|
|
|
|
"value": "175.193.99.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-4dd0-4081-ab26-4f5c950d210f",
|
|
|
|
|
"value": "178.151.83.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-a34c-4985-a084-43aa950d210f",
|
|
|
|
|
"value": "180.177.128.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-9640-4727-936d-433e950d210f",
|
|
|
|
|
"value": "182.114.242.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-8104-40d4-9c52-47cc950d210f",
|
|
|
|
|
"value": "182.115.174.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-57e4-4713-af1c-4793950d210f",
|
|
|
|
|
"value": "188.243.165.222"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-9830-40e8-8b24-401f950d210f",
|
|
|
|
|
"value": "203.218.8.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-4220-4bdd-96d4-406a950d210f",
|
|
|
|
|
"value": "203.74.133.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-6750-4a66-a4cc-4900950d210f",
|
|
|
|
|
"value": "210.104.153.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-c168-45c2-9dbc-48e3950d210f",
|
|
|
|
|
"value": "210.178.69.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-72f4-4871-adb3-40db950d210f",
|
|
|
|
|
"value": "211.219.150.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-9264-4c4c-b36b-4258950d210f",
|
|
|
|
|
"value": "219.252.220.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-2c60-443c-9714-4c30950d210f",
|
|
|
|
|
"value": "220.132.110.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-4244-492f-9226-4fd2950d210f",
|
|
|
|
|
"value": "220.70.19.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-b16c-40fa-818c-404e950d210f",
|
|
|
|
|
"value": "220.84.16.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-f338-4cfa-94a9-49af950d210f",
|
|
|
|
|
"value": "220.94.12.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-4228-4423-8861-4b7f950d210f",
|
|
|
|
|
"value": "222.139.204.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-d368-4d26-b81b-4aa7950d210f",
|
|
|
|
|
"value": "222.97.10.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-d454-4a16-9bd4-4c46950d210f",
|
|
|
|
|
"value": "223.16.148.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-863c-404d-a7bf-46e7950d210f",
|
|
|
|
|
"value": "223.17.167.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-1798-4a79-b875-4cba950d210f",
|
|
|
|
|
"value": "42.116.197.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-a9d4-4ee0-b20f-43bc950d210f",
|
|
|
|
|
"value": "42.116.33.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-908c-4ce5-a921-43f5950d210f",
|
|
|
|
|
"value": "42.230.208.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-51a8-4f80-b031-4be7950d210f",
|
|
|
|
|
"value": "45.58.148.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-30d4-4976-9240-4fbe950d210f",
|
|
|
|
|
"value": "5.42.83.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-4968-42bc-b8fa-4668950d210f",
|
|
|
|
|
"value": "58.71.199.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-2a58-42fd-9136-464d950d210f",
|
|
|
|
|
"value": "59.127.240.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-7b88-46a9-8bb7-4052950d210f",
|
|
|
|
|
"value": "59.127.85.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-e7ac-4ccd-813c-49c2950d210f",
|
|
|
|
|
"value": "61.102.164.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-fe54-43dd-9d97-4800950d210f",
|
|
|
|
|
"value": "61.241.170.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-1a2c-4796-a0cc-431f950d210f",
|
|
|
|
|
"value": "72.90.135.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-9ff0-4588-99fb-498e950d210f",
|
|
|
|
|
"value": "76.167.175.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-b698-4a6e-9df1-4a41950d210f",
|
|
|
|
|
"value": "88.249.202.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890341",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd65-1678-4908-896e-4765950d210f",
|
|
|
|
|
"value": "93.171.22.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890342",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd66-de5c-42f6-8ede-4ca9950d210f",
|
|
|
|
|
"value": "94.242.166.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1582890342",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e58fd66-d46c-4446-ad74-421d950d210f",
|
|
|
|
|
"value": "95.86.42.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-438c-48b6-a27c-1d4a950d210f",
|
|
|
|
|
"value": "1.243.143.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-b5d4-4218-adbf-1d4a950d210f",
|
|
|
|
|
"value": "103.124.84.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-edb0-480e-a27c-1d4a950d210f",
|
|
|
|
|
"value": "103.236.193.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-95f4-45e6-b176-1d4a950d210f",
|
|
|
|
|
"value": "103.66.14.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-6e0c-49b9-9286-1d4a950d210f",
|
|
|
|
|
"value": "106.105.208.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-b64c-4738-8a06-1d4a950d210f",
|
|
|
|
|
"value": "107.15.27.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-8d48-4739-88df-1d4a950d210f",
|
|
|
|
|
"value": "107.181.59.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113589",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6575-5294-48c1-ac9b-1d4a950d210f",
|
|
|
|
|
"value": "110.44.254.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-8e1c-4c28-8ffd-1d4a950d210f",
|
|
|
|
|
"value": "113.170.229.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-7a90-45d9-a80a-1d4a950d210f",
|
|
|
|
|
"value": "113.183.142.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-b778-4a37-9d33-1d4a950d210f",
|
|
|
|
|
"value": "113.188.81.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-cb70-41c1-93ae-1d4a950d210f",
|
|
|
|
|
"value": "113.25.64.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-bff8-4226-af35-1d4a950d210f",
|
|
|
|
|
"value": "114.35.7.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-4074-4ef8-9a62-1d4a950d210f",
|
|
|
|
|
"value": "115.23.49.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-0e48-4677-8f79-1d4a950d210f",
|
|
|
|
|
"value": "115.55.0.51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-2e64-4122-bdd6-1d4a950d210f",
|
|
|
|
|
"value": "115.77.184.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-6c40-490b-a4a0-1d4a950d210f",
|
|
|
|
|
"value": "115.96.125.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-f138-4be9-8ea2-1d4a950d210f",
|
|
|
|
|
"value": "116.21.1.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-9090-4747-a805-1d4a950d210f",
|
|
|
|
|
"value": "117.0.229.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-3668-463e-800d-1d4a950d210f",
|
|
|
|
|
"value": "117.57.53.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-d218-499e-93ee-1d4a950d210f",
|
|
|
|
|
"value": "117.6.104.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-e3c0-4856-a91b-1d4a950d210f",
|
|
|
|
|
"value": "118.38.124.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-aebc-4203-93ce-1d4a950d210f",
|
|
|
|
|
"value": "118.39.155.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-4b7c-4923-ba6e-1d4a950d210f",
|
|
|
|
|
"value": "118.68.44.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-7000-4ef6-a67e-1d4a950d210f",
|
|
|
|
|
"value": "119.198.153.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-4e58-4486-b5a4-1d4a950d210f",
|
|
|
|
|
"value": "121.164.60.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-ca10-4e03-9429-1d4a950d210f",
|
|
|
|
|
"value": "121.254.124.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-235c-437a-ba85-1d4a950d210f",
|
|
|
|
|
"value": "123.10.40.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-88b8-4f54-8da1-1d4a950d210f",
|
|
|
|
|
"value": "123.20.233.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-7b7c-44eb-b8c4-1d4a950d210f",
|
|
|
|
|
"value": "123.205.183.252"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-fd1c-4a99-946c-1d4a950d210f",
|
|
|
|
|
"value": "125.121.112.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-9b98-484f-a5fc-1d4a950d210f",
|
|
|
|
|
"value": "125.142.180.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-b038-4c62-ab64-1d4a950d210f",
|
|
|
|
|
"value": "125.206.75.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-901c-4af3-9de4-1d4a950d210f",
|
|
|
|
|
"value": "14.168.145.217"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-c630-4e55-8aeb-1d4a950d210f",
|
|
|
|
|
"value": "14.169.240.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-8870-4653-9153-1d4a950d210f",
|
|
|
|
|
"value": "169.0.137.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-aa1c-4abf-ac61-1d4a950d210f",
|
|
|
|
|
"value": "171.231.76.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-0474-48f2-9898-1d4a950d210f",
|
|
|
|
|
"value": "171.246.40.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-de94-4cec-b892-1d4a950d210f",
|
|
|
|
|
"value": "171.252.201.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-3838-46c7-979b-1d4a950d210f",
|
|
|
|
|
"value": "177.21.120.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-ea64-4380-9796-1d4a950d210f",
|
|
|
|
|
"value": "178.176.194.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-d348-40c9-bb20-1d4a950d210f",
|
|
|
|
|
"value": "180.68.89.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-2d50-4b5d-9e85-1d4a950d210f",
|
|
|
|
|
"value": "182.117.94.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-8d68-48c3-a676-1d4a950d210f",
|
|
|
|
|
"value": "182.53.41.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-b408-48a1-afc8-1d4a950d210f",
|
|
|
|
|
"value": "183.90.87.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113590",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6576-74fc-4604-997c-1d4a950d210f",
|
|
|
|
|
"value": "187.114.219.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-45cc-47ce-912b-1d4a950d210f",
|
|
|
|
|
"value": "210.16.113.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-04c4-45ee-b6c1-1d4a950d210f",
|
|
|
|
|
"value": "210.209.192.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-dbfc-48f5-80df-1d4a950d210f",
|
|
|
|
|
"value": "211.227.169.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-7dc4-4604-a943-1d4a950d210f",
|
|
|
|
|
"value": "218.149.14.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-9420-4730-be44-1d4a950d210f",
|
|
|
|
|
"value": "218.250.85.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-9f8c-4b31-b908-1d4a950d210f",
|
|
|
|
|
"value": "218.32.118.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-ae68-499b-9d4f-1d4a950d210f",
|
|
|
|
|
"value": "219.77.75.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-a1b4-42fd-9900-1d4a950d210f",
|
|
|
|
|
"value": "219.79.167.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-c468-419f-ae0c-1d4a950d210f",
|
|
|
|
|
"value": "220.132.102.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-9024-4ef1-8615-1d4a950d210f",
|
|
|
|
|
"value": "220.133.107.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-57d4-4387-a8b0-1d4a950d210f",
|
|
|
|
|
"value": "220.87.139.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-80a4-495b-8931-1d4a950d210f",
|
|
|
|
|
"value": "221.15.224.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-6230-4901-865f-1d4a950d210f",
|
|
|
|
|
"value": "221.15.3.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-b658-428c-9ff6-1d4a950d210f",
|
|
|
|
|
"value": "222.118.109.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-ee08-435b-a1d7-1d4a950d210f",
|
|
|
|
|
"value": "222.142.243.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-9814-4a17-beb4-1d4a950d210f",
|
|
|
|
|
"value": "222.142.245.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-94a4-4a14-9f27-1d4a950d210f",
|
|
|
|
|
"value": "222.214.54.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-8c3c-45a2-9d73-1d4a950d210f",
|
|
|
|
|
"value": "223.18.226.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-1228-4921-b88b-1d4a950d210f",
|
|
|
|
|
"value": "27.145.33.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-6c4c-498a-a09a-1d4a950d210f",
|
|
|
|
|
"value": "3.81.245.0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-915c-43ed-a164-1d4a950d210f",
|
|
|
|
|
"value": "42.119.7.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-1f14-45ee-8029-1d4a950d210f",
|
|
|
|
|
"value": "42.225.201.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-b4a4-4597-abe0-1d4a950d210f",
|
|
|
|
|
"value": "45.171.248.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-3d5c-4ccc-bd17-1d4a950d210f",
|
|
|
|
|
"value": "49.207.3.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-3ad4-4a4e-815b-1d4a950d210f",
|
|
|
|
|
"value": "5.164.216.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-eab0-424d-a765-1d4a950d210f",
|
|
|
|
|
"value": "5.165.86.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-b984-49ef-b3f6-1d4a950d210f",
|
|
|
|
|
"value": "5.206.227.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-e660-4b20-abec-1d4a950d210f",
|
|
|
|
|
"value": "5.227.136.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-0bfc-4cca-8d6c-1d4a950d210f",
|
|
|
|
|
"value": "59.126.151.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-4e34-4226-8b2c-1d4a950d210f",
|
|
|
|
|
"value": "59.60.78.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6577-3690-4e91-ad5e-1d4a950d210f",
|
|
|
|
|
"value": "60.250.235.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113591",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-26c0-414f-ad9d-1d4a950d210f",
|
|
|
|
|
"value": "60.50.163.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-0c28-42e3-a32d-1d4a950d210f",
|
|
|
|
|
"value": "78.87.236.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-be08-4f30-9068-1d4a950d210f",
|
|
|
|
|
"value": "79.132.95.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-7594-4142-bb2f-1d4a950d210f",
|
|
|
|
|
"value": "82.251.57.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-a454-403c-9fca-1d4a950d210f",
|
|
|
|
|
"value": "84.217.9.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-c564-4d3b-b893-1d4a950d210f",
|
|
|
|
|
"value": "86.42.7.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-b78c-4457-9000-1d4a950d210f",
|
|
|
|
|
"value": "87.96.177.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-1f80-43a7-ab91-1d4a950d210f",
|
|
|
|
|
"value": "89.205.126.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-017c-4ec5-9075-1d4a950d210f",
|
|
|
|
|
"value": "89.223.33.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-d474-41ea-aa27-1d4a950d210f",
|
|
|
|
|
"value": "94.242.133.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-c0fc-48a0-923e-1d4a950d210f",
|
|
|
|
|
"value": "106.172.70.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-7ab0-47d0-8b0a-1d4a950d210f",
|
|
|
|
|
"value": "113.255.226.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-b660-4822-af30-1d4a950d210f",
|
|
|
|
|
"value": "117.0.190.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-490c-4afc-a866-1d4a950d210f",
|
|
|
|
|
"value": "123.241.26.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-5988-4252-b9c9-1d4a950d210f",
|
|
|
|
|
"value": "1.52.123.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-b004-43f5-bb97-1d4a950d210f",
|
|
|
|
|
"value": "202.188.217.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-ac50-4ec3-bb4c-1d4a950d210f",
|
|
|
|
|
"value": "27.75.65.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-b198-4cae-bf9c-1d4a950d210f",
|
|
|
|
|
"value": "59.25.95.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113592",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6578-8e1c-4671-8003-1d4a950d210f",
|
|
|
|
|
"value": "61.85.218.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-d808-4a68-b5b2-42e1950d210f",
|
|
|
|
|
"value": "115.216.254.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-690c-4a43-a8e4-47c2950d210f",
|
|
|
|
|
"value": "117.63.186.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-32cc-42fd-99be-40f7950d210f",
|
|
|
|
|
"value": "119.200.191.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-5bb0-478a-8aa0-4b98950d210f",
|
|
|
|
|
"value": "121.123.62.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-48b0-40de-9a51-4929950d210f",
|
|
|
|
|
"value": "121.144.177.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-39ec-43c6-893e-4317950d210f",
|
|
|
|
|
"value": "121.180.188.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-6b68-47c7-afa1-4ccf950d210f",
|
|
|
|
|
"value": "122.117.142.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-4eb8-4db9-9d14-4847950d210f",
|
|
|
|
|
"value": "122.117.33.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-4ce8-45d6-bd2c-4fbc950d210f",
|
|
|
|
|
"value": "14.191.155.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-b670-4ec7-afa9-4d8f950d210f",
|
|
|
|
|
"value": "218.159.169.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-aff4-4eff-b87f-4687950d210f",
|
|
|
|
|
"value": "220.116.197.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-a088-4bac-a4e3-4e86950d210f",
|
|
|
|
|
"value": "220.134.160.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-401c-4a99-9f1e-4372950d210f",
|
|
|
|
|
"value": "45.231.31.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113798",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6646-9aa4-4f76-8153-4543950d210f",
|
|
|
|
|
"value": "46.72.152.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113799",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6647-dd58-486e-b4cf-4149950d210f",
|
|
|
|
|
"value": "49.213.192.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113799",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6647-0898-4613-a5ef-4cfa950d210f",
|
|
|
|
|
"value": "59.126.158.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113799",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6647-eec8-4d4a-a41f-4f67950d210f",
|
|
|
|
|
"value": "59.151.208.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-01T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583113799",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6647-63f0-44ab-a0c2-40fd950d210f",
|
|
|
|
|
"value": "60.248.125.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114873",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a79-fd5c-4c25-8e69-71ea950d210f",
|
|
|
|
|
"value": "113.255.2.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114873",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a79-6410-4dc9-9d70-71ea950d210f",
|
|
|
|
|
"value": "116.102.5.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114873",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a79-6a4c-49be-b3db-71ea950d210f",
|
|
|
|
|
"value": "118.232.97.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114873",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a79-14d8-42fd-8724-71ea950d210f",
|
|
|
|
|
"value": "120.29.140.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-25bc-4649-ba64-71ea950d210f",
|
|
|
|
|
"value": "14.173.239.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-8150-4b97-9316-71ea950d210f",
|
|
|
|
|
"value": "171.239.11.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-a270-4267-80da-71ea950d210f",
|
|
|
|
|
"value": "27.78.172.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-02b0-4175-aa2c-71ea950d210f",
|
|
|
|
|
"value": "80.184.230.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-54e8-447f-a93f-71ea950d210f",
|
|
|
|
|
"value": "103.91.180.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-b130-4ee5-adf2-71ea950d210f",
|
|
|
|
|
"value": "116.73.151.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-d4c8-4833-873d-71ea950d210f",
|
|
|
|
|
"value": "123.205.185.201"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-6738-4420-a257-71ea950d210f",
|
|
|
|
|
"value": "190.97.37.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-8fe0-48de-b09e-71ea950d210f",
|
|
|
|
|
"value": "218.35.81.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-7acc-46f3-9033-71ea950d210f",
|
|
|
|
|
"value": "49.213.194.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-ea8c-4ba0-b548-71ea950d210f",
|
|
|
|
|
"value": "60.254.2.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-02-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583114874",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5c6a7a-1320-4762-bbbb-71ea950d210f",
|
|
|
|
|
"value": "60.254.91.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137891",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc463-4c14-4791-9692-4eb2950d210f",
|
|
|
|
|
"value": "115.76.49.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137891",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc463-8344-4c07-ad08-4c50950d210f",
|
|
|
|
|
"value": "116.104.32.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137891",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc463-1b50-4c60-ba88-4d51950d210f",
|
|
|
|
|
"value": "123.240.73.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137891",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc463-7348-480e-b734-4083950d210f",
|
|
|
|
|
"value": "171.242.84.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137891",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc463-1220-4769-8105-445d950d210f",
|
|
|
|
|
"value": "221.15.54.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137892",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc464-b2a8-4d78-a396-4a54950d210f",
|
|
|
|
|
"value": "36.224.222.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137892",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc464-7744-4c0a-b5ea-49b3950d210f",
|
|
|
|
|
"value": "42.113.149.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137892",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc464-d5bc-460d-8bd9-425e950d210f",
|
|
|
|
|
"value": "59.126.18.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137892",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc464-feb0-4196-acc2-4e34950d210f",
|
|
|
|
|
"value": "96.246.155.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-02T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583137892",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5cc464-ee50-4d81-ba87-497c950d210f",
|
|
|
|
|
"value": "96.84.11.217"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298304",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3700-19b0-469c-aa8f-4984950d210f",
|
|
|
|
|
"value": "14.35.27.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-cee4-407a-936a-4ea7950d210f",
|
|
|
|
|
"value": "117.5.255.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-17c0-4dcc-961c-440c950d210f",
|
|
|
|
|
"value": "121.189.161.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-ba98-4d8f-8345-4af7950d210f",
|
|
|
|
|
"value": "122.116.58.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-149c-4d3f-b8d4-47f6950d210f",
|
|
|
|
|
"value": "122.117.152.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-3498-484e-b620-4be0950d210f",
|
|
|
|
|
"value": "14.187.245.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-7d58-456f-99bf-44eb950d210f",
|
|
|
|
|
"value": "164.163.224.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-1678-4814-8529-4836950d210f",
|
|
|
|
|
"value": "171.229.109.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-41f4-4f97-98af-4b42950d210f",
|
|
|
|
|
"value": "171.229.170.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-bb28-4f3c-aa75-4aa9950d210f",
|
|
|
|
|
"value": "171.242.121.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-211c-42fb-b5c0-4b3c950d210f",
|
|
|
|
|
"value": "179.49.71.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-bdd0-4c53-84bb-43f3950d210f",
|
|
|
|
|
"value": "189.136.133.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-949c-4c04-bc41-4000950d210f",
|
|
|
|
|
"value": "220.134.100.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-0914-4c21-ba8f-44ef950d210f",
|
|
|
|
|
"value": "27.76.81.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-7f78-4a2b-a484-44b7950d210f",
|
|
|
|
|
"value": "42.112.162.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-2b58-4e57-acef-474a950d210f",
|
|
|
|
|
"value": "58.121.76.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-8a90-437f-99a0-4a6b950d210f",
|
|
|
|
|
"value": "59.126.247.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-d344-412a-a906-4aa0950d210f",
|
|
|
|
|
"value": "82.193.153.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583298305",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e5f3701-2824-4f7d-afae-4841950d210f",
|
|
|
|
|
"value": "88.250.172.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-d080-40b2-9ada-40c5950d210f",
|
|
|
|
|
"value": "1.54.34.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-4afc-4bae-bc40-4b8f950d210f",
|
|
|
|
|
"value": "113.161.80.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-d3d8-4588-9e25-437e950d210f",
|
|
|
|
|
"value": "114.33.204.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-93b8-4836-980c-4f4f950d210f",
|
|
|
|
|
"value": "114.35.140.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-6ce8-43d1-a1b6-41e7950d210f",
|
|
|
|
|
"value": "114.35.27.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-fb64-4b4a-89d4-46e0950d210f",
|
|
|
|
|
"value": "116.97.60.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-2684-43db-948d-485e950d210f",
|
|
|
|
|
"value": "122.117.84.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-e9b0-415c-809e-48fe950d210f",
|
|
|
|
|
"value": "123.12.233.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-a290-4661-b381-4ca3950d210f",
|
|
|
|
|
"value": "171.234.190.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-787c-4ad4-825f-46d1950d210f",
|
|
|
|
|
"value": "171.242.121.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-1c00-49c9-ad9d-4aed950d210f",
|
|
|
|
|
"value": "220.132.205.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-04T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583389936",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e609cf0-b244-4b75-998a-4620950d210f",
|
|
|
|
|
"value": "61.223.236.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753817",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a59-332c-4499-8e5e-4eac950d210f",
|
|
|
|
|
"value": "103.219.45.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753821",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a5d-e6cc-485b-8d11-489c950d210f",
|
|
|
|
|
"value": "114.33.115.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753826",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a62-e544-49b0-8d99-483e950d210f",
|
|
|
|
|
"value": "114.35.245.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753826",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a62-6b98-444e-8297-4f2e950d210f",
|
|
|
|
|
"value": "117.0.191.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753826",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a62-0a28-4eea-aee1-4e6d950d210f",
|
|
|
|
|
"value": "118.100.69.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-5724-492a-b753-41b5950d210f",
|
|
|
|
|
"value": "119.193.177.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-b0ec-4267-97a8-4b81950d210f",
|
|
|
|
|
"value": "125.231.36.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-6be4-4caa-860a-45e3950d210f",
|
|
|
|
|
"value": "14.174.234.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-8278-49aa-a53a-492d950d210f",
|
|
|
|
|
"value": "183.108.190.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-58ac-4ba5-8f40-40fb950d210f",
|
|
|
|
|
"value": "210.61.41.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-d720-4f61-a887-4b2f950d210f",
|
|
|
|
|
"value": "218.161.56.136"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-65c8-4833-b96c-44a8950d210f",
|
|
|
|
|
"value": "218.161.99.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-a59c-45cb-b71a-4e7f950d210f",
|
|
|
|
|
"value": "220.133.48.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-be8c-4264-aef2-4d90950d210f",
|
|
|
|
|
"value": "220.135.215.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-32b8-4b27-b239-4619950d210f",
|
|
|
|
|
"value": "36.232.66.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-9d60-4264-b74b-4dc1950d210f",
|
|
|
|
|
"value": "36.234.94.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-48e8-4235-9c8c-45db950d210f",
|
|
|
|
|
"value": "37.110.28.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-3c20-4d97-a9f3-46e8950d210f",
|
|
|
|
|
"value": "42.112.162.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-b420-45e5-8899-4bb8950d210f",
|
|
|
|
|
"value": "43.247.40.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-f478-4778-8d8b-46e7950d210f",
|
|
|
|
|
"value": "45.171.124.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-4768-4dda-adb8-4bba950d210f",
|
|
|
|
|
"value": "46.1.139.72"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-8330-4163-9796-4203950d210f",
|
|
|
|
|
"value": "49.213.240.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-5244-43cc-aaf6-433c950d210f",
|
|
|
|
|
"value": "61.85.229.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-0230-4d95-9165-43d5950d210f",
|
|
|
|
|
"value": "79.125.183.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-05T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-03-08T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1583753827",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e662a63-1fac-4835-bd1c-4d56950d210f",
|
|
|
|
|
"value": "93.157.152.247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123117",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ad-1b74-4e93-8824-04a2950d210f",
|
|
|
|
|
"value": "1.1.180.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-c9c8-447f-bc38-04a2950d210f",
|
|
|
|
|
"value": "1.11.157.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-d458-4c34-950c-04a2950d210f",
|
|
|
|
|
"value": "1.160.16.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-8304-4fad-86da-04a2950d210f",
|
|
|
|
|
"value": "1.160.180.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-7660-4abb-8252-04a2950d210f",
|
|
|
|
|
"value": "1.161.114.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-6dfc-420f-b2ff-04a2950d210f",
|
|
|
|
|
"value": "1.161.122.100"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-eff8-49dc-b16a-04a2950d210f",
|
|
|
|
|
"value": "1.162.144.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-d834-4a37-ba67-04a2950d210f",
|
|
|
|
|
"value": "1.162.144.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-ac44-44db-9228-04a2950d210f",
|
|
|
|
|
"value": "1.162.144.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-cf60-4518-8599-04a2950d210f",
|
|
|
|
|
"value": "1.162.221.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-edcc-44f4-964e-04a2950d210f",
|
|
|
|
|
"value": "1.163.202.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-fe28-4806-b709-04a2950d210f",
|
|
|
|
|
"value": "1.163.205.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-c164-4a0c-b3c2-04a2950d210f",
|
|
|
|
|
"value": "1.163.36.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-590c-4f70-a227-04a2950d210f",
|
|
|
|
|
"value": "1.163.52.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-a2f8-49a4-9cc4-04a2950d210f",
|
|
|
|
|
"value": "1.165.163.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-46fc-4745-adc3-04a2950d210f",
|
|
|
|
|
"value": "1.165.241.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-c6d0-4977-873e-04a2950d210f",
|
|
|
|
|
"value": "1.165.88.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-9db8-4ebf-a9a1-04a2950d210f",
|
|
|
|
|
"value": "1.169.244.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-38e4-4bcc-b355-04a2950d210f",
|
|
|
|
|
"value": "1.169.72.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-e6d0-463d-98f7-04a2950d210f",
|
|
|
|
|
"value": "1.170.89.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-b2d0-4891-9961-04a2950d210f",
|
|
|
|
|
"value": "1.170.92.201"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-5544-4f3f-9821-04a2950d210f",
|
|
|
|
|
"value": "1.171.11.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-941c-4ad6-aab6-04a2950d210f",
|
|
|
|
|
"value": "1.171.254.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-dde4-46de-a236-04a2950d210f",
|
|
|
|
|
"value": "1.172.190.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-a1e8-477d-b729-04a2950d210f",
|
|
|
|
|
"value": "1.172.52.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-3280-401b-be6f-04a2950d210f",
|
|
|
|
|
"value": "1.173.108.121"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-701c-4db5-b2bd-04a2950d210f",
|
|
|
|
|
"value": "1.174.90.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-717c-49c0-8e4c-04a2950d210f",
|
|
|
|
|
"value": "1.175.148.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-a8a0-45ec-a3a1-04a2950d210f",
|
|
|
|
|
"value": "1.175.172.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-5ce8-43e8-b632-04a2950d210f",
|
|
|
|
|
"value": "1.175.175.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-a53c-434c-b473-04a2950d210f",
|
|
|
|
|
"value": "1.175.211.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-a22c-4a07-903d-04a2950d210f",
|
|
|
|
|
"value": "1.175.254.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-99a4-4e47-927f-04a2950d210f",
|
|
|
|
|
"value": "1.175.68.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-8050-4c43-b24f-04a2950d210f",
|
|
|
|
|
"value": "1.175.71.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-81b0-45cb-89e0-04a2950d210f",
|
|
|
|
|
"value": "1.237.51.247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-0fb0-4cfd-86a5-04a2950d210f",
|
|
|
|
|
"value": "1.241.4.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-57f0-42c0-a7ee-04a2950d210f",
|
|
|
|
|
"value": "1.34.130.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-9d88-4d35-8b41-04a2950d210f",
|
|
|
|
|
"value": "1.34.133.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-d020-4abb-814a-04a2950d210f",
|
|
|
|
|
"value": "1.34.159.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-484c-4224-9783-04a2950d210f",
|
|
|
|
|
"value": "1.34.247.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-9488-4864-8fd1-04a2950d210f",
|
|
|
|
|
"value": "1.36.17.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-e674-4b9c-8e0f-04a2950d210f",
|
|
|
|
|
"value": "1.36.225.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-40a8-426c-a16e-04a2950d210f",
|
|
|
|
|
"value": "1.52.16.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-87f4-4cfd-82de-04a2950d210f",
|
|
|
|
|
"value": "1.53.124.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-12a0-453b-969d-04a2950d210f",
|
|
|
|
|
"value": "1.59.105.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-3198-4bd2-af70-04a2950d210f",
|
|
|
|
|
"value": "1.64.1.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-2998-4469-bb38-04a2950d210f",
|
|
|
|
|
"value": "1.64.114.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-dbac-4185-bcd5-04a2950d210f",
|
|
|
|
|
"value": "1.64.255.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-3a3c-4177-a8e8-04a2950d210f",
|
|
|
|
|
"value": "1.65.135.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-54bc-4500-9add-04a2950d210f",
|
|
|
|
|
"value": "1.65.158.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-93e0-4592-ae3c-04a2950d210f",
|
|
|
|
|
"value": "1.65.165.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123118",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ae-ac6c-4ad3-8934-04a2950d210f",
|
|
|
|
|
"value": "1.65.170.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-63bc-403d-9036-04a2950d210f",
|
|
|
|
|
"value": "1.65.184.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-ba18-4c45-bc59-04a2950d210f",
|
|
|
|
|
"value": "1.65.185.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-292c-40ef-a006-04a2950d210f",
|
|
|
|
|
"value": "1.69.1.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-fdc0-4313-b568-04a2950d210f",
|
|
|
|
|
"value": "103.204.221.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-4784-4402-88e9-04a2950d210f",
|
|
|
|
|
"value": "103.207.58.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-9fe8-451a-babd-04a2950d210f",
|
|
|
|
|
"value": "103.250.38.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-8c3c-4505-8523-04a2950d210f",
|
|
|
|
|
"value": "103.91.180.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-51ac-4acc-9963-04a2950d210f",
|
|
|
|
|
"value": "104.162.247.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-7354-40c9-965d-04a2950d210f",
|
|
|
|
|
"value": "105.139.66.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-9524-4b8f-a851-04a2950d210f",
|
|
|
|
|
"value": "106.0.37.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-035c-434a-8fe8-04a2950d210f",
|
|
|
|
|
"value": "106.105.174.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-5640-4b5e-8a9d-04a2950d210f",
|
|
|
|
|
"value": "106.105.84.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-4230-4537-b5df-04a2950d210f",
|
|
|
|
|
"value": "106.107.253.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-61a0-4ea3-969a-04a2950d210f",
|
|
|
|
|
"value": "106.253.202.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-dd64-4d21-96b8-04a2950d210f",
|
|
|
|
|
"value": "106.51.127.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-5930-4555-9b2c-04a2950d210f",
|
|
|
|
|
"value": "108.221.169.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-16c8-435b-beb3-04a2950d210f",
|
|
|
|
|
"value": "109.117.173.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-dbcc-4272-b210-04a2950d210f",
|
|
|
|
|
"value": "109.200.234.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-ebd0-4ae1-a01e-04a2950d210f",
|
|
|
|
|
"value": "109.241.235.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-f420-4a15-906d-04a2950d210f",
|
|
|
|
|
"value": "109.248.241.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-7af8-42be-a1ce-04a2950d210f",
|
|
|
|
|
"value": "109.248.241.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-d370-423f-b974-04a2950d210f",
|
|
|
|
|
"value": "109.248.241.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-6a84-4263-bf74-04a2950d210f",
|
|
|
|
|
"value": "109.248.241.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-b43c-49c8-b7f3-04a2950d210f",
|
|
|
|
|
"value": "109.248.241.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-c674-4c8b-ac07-04a2950d210f",
|
|
|
|
|
"value": "109.99.230.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-baec-4185-af20-04a2950d210f",
|
|
|
|
|
"value": "110.241.122.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-e8fc-4847-893b-04a2950d210f",
|
|
|
|
|
"value": "110.47.211.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-e710-4ab1-9dcb-04a2950d210f",
|
|
|
|
|
"value": "111.125.140.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123119",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993af-6e8c-49da-96f2-04a2950d210f",
|
|
|
|
|
"value": "111.241.148.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-d53c-48b4-b6dc-04a2950d210f",
|
|
|
|
|
"value": "111.241.66.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-8dbc-4a75-b201-04a2950d210f",
|
|
|
|
|
"value": "111.242.13.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-7f0c-488f-a6b2-04a2950d210f",
|
|
|
|
|
"value": "111.242.165.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-85a8-441c-a43f-04a2950d210f",
|
|
|
|
|
"value": "111.242.232.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-a4c0-43e2-8506-04a2950d210f",
|
|
|
|
|
"value": "111.242.39.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-4434-4e17-8580-04a2950d210f",
|
|
|
|
|
"value": "111.243.190.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-b11c-4567-8592-04a2950d210f",
|
|
|
|
|
"value": "111.243.41.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-8994-4698-b1e8-04a2950d210f",
|
|
|
|
|
"value": "111.246.149.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-a854-48ab-8370-04a2950d210f",
|
|
|
|
|
"value": "111.246.169.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-4584-4b6e-8172-04a2950d210f",
|
|
|
|
|
"value": "111.246.81.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-c234-4ae4-a58e-04a2950d210f",
|
|
|
|
|
"value": "111.246.85.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-5200-4846-9863-04a2950d210f",
|
|
|
|
|
"value": "111.248.2.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-ca18-41c7-91a3-04a2950d210f",
|
|
|
|
|
"value": "111.248.31.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-0e44-44ba-b4fc-04a2950d210f",
|
|
|
|
|
"value": "111.248.81.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-7448-47ac-9e0c-04a2950d210f",
|
|
|
|
|
"value": "111.250.226.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-813c-4242-ada5-04a2950d210f",
|
|
|
|
|
"value": "111.250.233.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-bd34-4d56-bde6-04a2950d210f",
|
|
|
|
|
"value": "111.250.29.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123120",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b0-e4b8-417e-9448-04a2950d210f",
|
|
|
|
|
"value": "111.250.80.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-9d4c-4906-94dc-04a2950d210f",
|
|
|
|
|
"value": "111.251.209.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-f638-4c5f-a658-04a2950d210f",
|
|
|
|
|
"value": "111.252.121.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-31ec-4649-9983-04a2950d210f",
|
|
|
|
|
"value": "111.252.140.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-c6a8-4abd-976d-04a2950d210f",
|
|
|
|
|
"value": "111.252.238.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-2114-4d9b-8ada-04a2950d210f",
|
|
|
|
|
"value": "111.254.200.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-a5f0-4d71-9f10-04a2950d210f",
|
|
|
|
|
"value": "111.255.18.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-f754-49ee-a708-04a2950d210f",
|
|
|
|
|
"value": "112.1.35.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-6e08-4ea4-932c-04a2950d210f",
|
|
|
|
|
"value": "112.104.130.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-cff8-4f74-954b-04a2950d210f",
|
|
|
|
|
"value": "112.118.152.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-2f40-4055-9ae9-04a2950d210f",
|
|
|
|
|
"value": "112.118.198.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-0388-477a-9d3d-04a2950d210f",
|
|
|
|
|
"value": "112.118.46.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-34e4-4597-977f-04a2950d210f",
|
|
|
|
|
"value": "112.118.59.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-14dc-4018-ba24-04a2950d210f",
|
|
|
|
|
"value": "112.118.80.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-6f58-4e9e-a2de-04a2950d210f",
|
|
|
|
|
"value": "112.119.213.100"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-2a7c-4b96-a253-04a2950d210f",
|
|
|
|
|
"value": "112.119.220.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-f25c-40ee-a678-04a2950d210f",
|
|
|
|
|
"value": "112.120.174.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-efc4-4586-97e9-04a2950d210f",
|
|
|
|
|
"value": "112.120.181.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-6b38-4393-88c6-04a2950d210f",
|
|
|
|
|
"value": "112.120.189.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-a538-4360-bca7-04a2950d210f",
|
|
|
|
|
"value": "112.165.53.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-b3fc-4ea7-bcb0-04a2950d210f",
|
|
|
|
|
"value": "112.165.85.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-7f2c-4b6c-a94b-04a2950d210f",
|
|
|
|
|
"value": "112.172.6.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-603c-429e-b7de-04a2950d210f",
|
|
|
|
|
"value": "112.184.115.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-e558-4e21-aa36-04a2950d210f",
|
|
|
|
|
"value": "112.194.117.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-6954-4b7c-b5c2-04a2950d210f",
|
|
|
|
|
"value": "112.197.97.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-1a74-403d-a813-04a2950d210f",
|
|
|
|
|
"value": "112.199.236.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-598c-43f2-a240-04a2950d210f",
|
|
|
|
|
"value": "112.226.242.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123121",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b1-83f0-4f9c-b36a-04a2950d210f",
|
|
|
|
|
"value": "112.66.71.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-e398-4071-9fb3-04a2950d210f",
|
|
|
|
|
"value": "113.116.88.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-eb48-4ce4-b6e4-04a2950d210f",
|
|
|
|
|
"value": "113.182.35.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-8404-4c77-abb2-04a2950d210f",
|
|
|
|
|
"value": "113.219.47.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-b69c-4231-beb9-04a2950d210f",
|
|
|
|
|
"value": "113.22.208.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-5084-44f7-bf13-04a2950d210f",
|
|
|
|
|
"value": "113.22.97.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-ba0c-4b11-a63b-04a2950d210f",
|
|
|
|
|
"value": "113.25.165.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-e0e0-4c6e-8c77-04a2950d210f",
|
|
|
|
|
"value": "113.25.166.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-7060-428e-80f2-04a2950d210f",
|
|
|
|
|
"value": "113.252.191.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-ae00-43fb-a8fe-04a2950d210f",
|
|
|
|
|
"value": "113.253.178.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-043c-42c9-9422-04a2950d210f",
|
|
|
|
|
"value": "113.253.228.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-b224-4f1e-970b-04a2950d210f",
|
|
|
|
|
"value": "113.253.57.249"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-7d7c-4860-9a1b-04a2950d210f",
|
|
|
|
|
"value": "113.254.144.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-4ff8-4497-9b39-04a2950d210f",
|
|
|
|
|
"value": "113.254.226.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-8ce0-4029-8a41-04a2950d210f",
|
|
|
|
|
"value": "113.254.247.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-86d8-442f-9c24-04a2950d210f",
|
|
|
|
|
"value": "113.254.250.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-99ac-4454-b278-04a2950d210f",
|
|
|
|
|
"value": "113.254.37.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-55bc-4ebf-8b81-04a2950d210f",
|
|
|
|
|
"value": "113.26.62.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-df04-46e7-a431-04a2950d210f",
|
|
|
|
|
"value": "113.70.76.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-0ab0-49ff-99ee-04a2950d210f",
|
|
|
|
|
"value": "114.199.223.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-769c-4180-942a-04a2950d210f",
|
|
|
|
|
"value": "114.24.208.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-00c0-482d-b56f-04a2950d210f",
|
|
|
|
|
"value": "114.24.64.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-d3e8-473c-9d74-04a2950d210f",
|
|
|
|
|
"value": "114.24.91.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-3c24-40ca-8046-04a2950d210f",
|
|
|
|
|
"value": "114.250.110.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-cffc-4972-af23-04a2950d210f",
|
|
|
|
|
"value": "114.26.108.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-a8dc-4124-a915-04a2950d210f",
|
|
|
|
|
"value": "114.26.43.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-633c-4dba-9f44-04a2950d210f",
|
|
|
|
|
"value": "114.32.120.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-ad78-4720-95e4-04a2950d210f",
|
|
|
|
|
"value": "114.32.185.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-31dc-4c18-886a-04a2950d210f",
|
|
|
|
|
"value": "114.32.188.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-4234-4260-83c0-04a2950d210f",
|
|
|
|
|
"value": "114.32.20.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-4228-4987-8dc9-04a2950d210f",
|
|
|
|
|
"value": "114.32.227.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123122",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b2-f058-4c70-a55d-04a2950d210f",
|
|
|
|
|
"value": "114.32.29.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-0390-4d13-8adf-04a2950d210f",
|
|
|
|
|
"value": "114.32.37.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-c324-4fdc-90bf-04a2950d210f",
|
|
|
|
|
"value": "114.32.47.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-8b4c-46b3-9fb1-04a2950d210f",
|
|
|
|
|
"value": "114.33.11.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-c85c-4ce5-bc52-04a2950d210f",
|
|
|
|
|
"value": "114.33.127.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-1ce0-4277-9507-04a2950d210f",
|
|
|
|
|
"value": "114.33.146.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-d044-4e62-9d99-04a2950d210f",
|
|
|
|
|
"value": "114.33.212.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-c0cc-4688-8d30-04a2950d210f",
|
|
|
|
|
"value": "114.34.176.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-454c-41c8-ba0a-04a2950d210f",
|
|
|
|
|
"value": "114.34.194.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-4fac-4f51-a26d-04a2950d210f",
|
|
|
|
|
"value": "114.34.228.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-f10c-45f9-90a7-04a2950d210f",
|
|
|
|
|
"value": "114.34.56.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-f308-4356-9e50-04a2950d210f",
|
|
|
|
|
"value": "114.34.97.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-a0d0-40ff-ba55-04a2950d210f",
|
|
|
|
|
"value": "114.35.108.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-03ec-4bb3-9614-04a2950d210f",
|
|
|
|
|
"value": "114.35.109.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-6f64-4fd5-b436-04a2950d210f",
|
|
|
|
|
"value": "114.35.124.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-998c-40db-a016-04a2950d210f",
|
|
|
|
|
"value": "114.35.147.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-8788-4e55-af69-04a2950d210f",
|
|
|
|
|
"value": "114.35.47.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-63a8-4c86-98e0-04a2950d210f",
|
|
|
|
|
"value": "114.35.59.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-9bfc-4f9b-9d56-04a2950d210f",
|
|
|
|
|
"value": "114.36.184.121"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-bfb8-4948-84bd-04a2950d210f",
|
|
|
|
|
"value": "114.37.124.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-59e0-4d64-a4f6-04a2950d210f",
|
|
|
|
|
"value": "114.38.167.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-3974-4d3d-9499-04a2950d210f",
|
|
|
|
|
"value": "114.38.2.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-7b70-45e4-ad80-04a2950d210f",
|
|
|
|
|
"value": "114.38.27.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-f110-45c0-88c6-04a2950d210f",
|
|
|
|
|
"value": "114.39.155.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-a2fc-4ab9-b3cc-04a2950d210f",
|
|
|
|
|
"value": "114.40.112.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-5054-4f60-9733-04a2950d210f",
|
|
|
|
|
"value": "114.40.169.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-0dd4-461f-8e0c-04a2950d210f",
|
|
|
|
|
"value": "114.40.176.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-12e4-4c17-a9db-04a2950d210f",
|
|
|
|
|
"value": "114.40.240.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-ff8c-494a-a84e-04a2950d210f",
|
|
|
|
|
"value": "114.40.46.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-85b0-4bd6-aec8-04a2950d210f",
|
|
|
|
|
"value": "114.40.52.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-5ddc-4136-8601-04a2950d210f",
|
|
|
|
|
"value": "114.41.0.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-0140-40a1-b7b1-04a2950d210f",
|
|
|
|
|
"value": "114.41.204.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-6f74-4b78-9916-04a2950d210f",
|
|
|
|
|
"value": "114.41.27.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-e12c-4b4a-89d8-04a2950d210f",
|
|
|
|
|
"value": "114.41.43.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-719c-4afd-848e-04a2950d210f",
|
|
|
|
|
"value": "114.43.172.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-e6ac-4de3-aa16-04a2950d210f",
|
|
|
|
|
"value": "114.43.219.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-b18c-44b7-8a55-04a2950d210f",
|
|
|
|
|
"value": "114.43.56.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-d8b8-4e96-b61e-04a2950d210f",
|
|
|
|
|
"value": "114.44.54.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-8cb0-4f3c-8919-04a2950d210f",
|
|
|
|
|
"value": "114.45.126.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-18d0-4f62-bc2b-04a2950d210f",
|
|
|
|
|
"value": "114.45.139.217"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-1934-498b-9a0c-04a2950d210f",
|
|
|
|
|
"value": "114.45.33.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-6bec-42dc-b10b-04a2950d210f",
|
|
|
|
|
"value": "114.45.79.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-d088-4c3e-a656-04a2950d210f",
|
|
|
|
|
"value": "114.46.129.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-94bc-4daa-ac6a-04a2950d210f",
|
|
|
|
|
"value": "114.46.63.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-ee9c-422f-9f26-04a2950d210f",
|
|
|
|
|
"value": "114.47.118.222"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-3814-4b85-9d39-04a2950d210f",
|
|
|
|
|
"value": "115.165.211.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123123",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b3-7ee4-4847-b4a2-04a2950d210f",
|
|
|
|
|
"value": "115.50.210.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-9368-4396-a32f-04a2950d210f",
|
|
|
|
|
"value": "115.58.16.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-f818-4cfe-b8e8-04a2950d210f",
|
|
|
|
|
"value": "115.59.51.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-23f4-486b-9535-04a2950d210f",
|
|
|
|
|
"value": "115.61.12.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-5d04-464c-ba59-04a2950d210f",
|
|
|
|
|
"value": "115.74.183.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-c8c8-4e07-8e70-04a2950d210f",
|
|
|
|
|
"value": "115.75.124.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-2150-43e5-9493-04a2950d210f",
|
|
|
|
|
"value": "115.76.217.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-7200-4664-a0e3-04a2950d210f",
|
|
|
|
|
"value": "115.77.205.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-7f8c-445b-8234-04a2950d210f",
|
|
|
|
|
"value": "115.97.50.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-ce50-48c3-8128-04a2950d210f",
|
|
|
|
|
"value": "116.100.15.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-b0fc-4438-8855-04a2950d210f",
|
|
|
|
|
"value": "116.100.9.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-e6cc-4abd-889a-04a2950d210f",
|
|
|
|
|
"value": "116.101.61.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-6168-4203-8932-04a2950d210f",
|
|
|
|
|
"value": "116.104.120.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-45f8-4c55-9b4e-04a2950d210f",
|
|
|
|
|
"value": "116.104.120.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-96e0-4c61-b57a-04a2950d210f",
|
|
|
|
|
"value": "116.104.120.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-0d48-4747-9558-04a2950d210f",
|
|
|
|
|
"value": "116.104.123.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-dbcc-499e-9818-04a2950d210f",
|
|
|
|
|
"value": "116.104.124.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-3f48-482e-9c07-04a2950d210f",
|
|
|
|
|
"value": "116.104.125.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-a988-45b1-8d7d-04a2950d210f",
|
|
|
|
|
"value": "116.104.36.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-a30c-48e1-8235-04a2950d210f",
|
|
|
|
|
"value": "116.104.37.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-c53c-4cee-bd04-04a2950d210f",
|
|
|
|
|
"value": "116.107.146.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-2c2c-43b7-97b9-04a2950d210f",
|
|
|
|
|
"value": "116.107.21.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-d8e0-40cf-a67f-04a2950d210f",
|
|
|
|
|
"value": "116.109.58.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-3448-4a5b-a0f6-04a2950d210f",
|
|
|
|
|
"value": "116.111.45.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-da68-44e9-a2cc-04a2950d210f",
|
|
|
|
|
"value": "116.111.47.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-32e8-480b-bae5-04a2950d210f",
|
|
|
|
|
"value": "116.113.99.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-3dd0-4ec2-acad-04a2950d210f",
|
|
|
|
|
"value": "116.113.99.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-2200-45f1-a033-04a2950d210f",
|
|
|
|
|
"value": "116.241.29.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-0184-4af5-aa8f-04a2950d210f",
|
|
|
|
|
"value": "116.48.13.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-e5bc-45dd-b159-04a2950d210f",
|
|
|
|
|
"value": "116.48.84.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-e330-4ebb-83f4-04a2950d210f",
|
|
|
|
|
"value": "116.49.141.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-71ac-4d52-836e-04a2950d210f",
|
|
|
|
|
"value": "116.49.181.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-7748-4f18-8e74-04a2950d210f",
|
|
|
|
|
"value": "116.72.51.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-a24c-4e1f-9bda-04a2950d210f",
|
|
|
|
|
"value": "116.87.188.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-0fc0-4c5d-98b4-04a2950d210f",
|
|
|
|
|
"value": "116.96.107.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-61d4-4736-8585-04a2950d210f",
|
|
|
|
|
"value": "116.97.178.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-2050-4742-baf6-04a2950d210f",
|
|
|
|
|
"value": "116.97.57.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123124",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b4-b20c-4947-8cca-04a2950d210f",
|
|
|
|
|
"value": "117.0.188.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-a62c-48a6-bcf8-04a2950d210f",
|
|
|
|
|
"value": "117.0.191.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-dc74-4d94-93fb-04a2950d210f",
|
|
|
|
|
"value": "117.0.9.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-d8f4-415e-a3d7-04a2950d210f",
|
|
|
|
|
"value": "117.1.150.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-6bcc-4361-8b83-04a2950d210f",
|
|
|
|
|
"value": "117.1.151.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-f100-41a7-bae1-04a2950d210f",
|
|
|
|
|
"value": "117.1.94.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-aa94-445e-887f-04a2950d210f",
|
|
|
|
|
"value": "117.5.211.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-3820-4dde-b303-04a2950d210f",
|
|
|
|
|
"value": "117.5.246.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-20bc-4cba-8ff3-04a2950d210f",
|
|
|
|
|
"value": "117.5.249.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-2e2c-495b-8f36-04a2950d210f",
|
|
|
|
|
"value": "117.5.250.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-505c-47ed-b9a2-04a2950d210f",
|
|
|
|
|
"value": "117.7.104.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-d9ac-41ca-8ddb-04a2950d210f",
|
|
|
|
|
"value": "117.7.104.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-3c38-4562-9861-04a2950d210f",
|
|
|
|
|
"value": "117.7.107.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-dab4-4f9e-9a61-04a2950d210f",
|
|
|
|
|
"value": "117.93.14.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-1ba8-4027-8c82-04a2950d210f",
|
|
|
|
|
"value": "117.94.144.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-8d30-4ca8-99ec-04a2950d210f",
|
|
|
|
|
"value": "117.94.162.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-82b0-400d-b3c1-04a2950d210f",
|
|
|
|
|
"value": "118.100.39.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123125",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b5-102c-419a-9e77-04a2950d210f",
|
|
|
|
|
"value": "118.165.126.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-d858-4749-b521-04a2950d210f",
|
|
|
|
|
"value": "118.165.138.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-7630-438b-8e7d-04a2950d210f",
|
|
|
|
|
"value": "118.165.67.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-63e8-465b-bd6e-04a2950d210f",
|
|
|
|
|
"value": "118.166.112.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-17e4-4526-9815-04a2950d210f",
|
|
|
|
|
"value": "118.166.254.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-45ac-4c17-9e1d-04a2950d210f",
|
|
|
|
|
"value": "118.167.32.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-07dc-42d0-9f1d-04a2950d210f",
|
|
|
|
|
"value": "118.168.130.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-6c70-4b9f-922b-04a2950d210f",
|
|
|
|
|
"value": "118.170.154.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-a240-48eb-8470-04a2950d210f",
|
|
|
|
|
"value": "118.170.206.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-900c-4162-8a09-04a2950d210f",
|
|
|
|
|
"value": "118.170.207.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-066c-4c6c-b7ff-04a2950d210f",
|
|
|
|
|
"value": "118.170.235.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-e030-44f4-90c9-04a2950d210f",
|
|
|
|
|
"value": "118.32.23.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-377c-45bc-a241-04a2950d210f",
|
|
|
|
|
"value": "118.34.214.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-07e0-4b6f-a408-04a2950d210f",
|
|
|
|
|
"value": "118.42.173.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-2b08-4d9f-ac85-04a2950d210f",
|
|
|
|
|
"value": "118.42.175.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-85a8-4a80-935c-04a2950d210f",
|
|
|
|
|
"value": "118.42.176.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-ac10-489d-abfd-04a2950d210f",
|
|
|
|
|
"value": "118.71.31.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-305c-4893-a110-04a2950d210f",
|
|
|
|
|
"value": "119.193.100.249"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-5b4c-43d3-9066-04a2950d210f",
|
|
|
|
|
"value": "119.200.112.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-60bc-4897-96e4-04a2950d210f",
|
|
|
|
|
"value": "119.202.101.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-e37c-4595-945c-04a2950d210f",
|
|
|
|
|
"value": "119.236.136.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-a740-410d-ba66-04a2950d210f",
|
|
|
|
|
"value": "119.236.194.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-63ac-49cb-8702-04a2950d210f",
|
|
|
|
|
"value": "119.236.9.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-6a6c-4261-9050-04a2950d210f",
|
|
|
|
|
"value": "119.237.175.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-0fb4-43bf-bc50-04a2950d210f",
|
|
|
|
|
"value": "119.237.35.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-5364-4975-901f-04a2950d210f",
|
|
|
|
|
"value": "119.237.40.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-8bc0-4c7a-a602-04a2950d210f",
|
|
|
|
|
"value": "119.237.70.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-0f40-4421-9768-04a2950d210f",
|
|
|
|
|
"value": "119.237.75.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123126",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b6-47c0-42da-a3ce-04a2950d210f",
|
|
|
|
|
"value": "119.247.82.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-ea90-4620-8ae2-04a2950d210f",
|
|
|
|
|
"value": "119.7.192.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-0104-4b6f-a822-04a2950d210f",
|
|
|
|
|
"value": "120.138.6.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-c2d0-4fbc-9a0f-04a2950d210f",
|
|
|
|
|
"value": "120.50.11.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-453c-4613-b422-04a2950d210f",
|
|
|
|
|
"value": "121.121.119.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-49f8-42c8-8218-04a2950d210f",
|
|
|
|
|
"value": "121.132.132.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-0a90-4374-aba1-04a2950d210f",
|
|
|
|
|
"value": "121.133.208.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-54e8-4ee9-8bbd-04a2950d210f",
|
|
|
|
|
"value": "121.136.178.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-e7a0-4b12-95e3-04a2950d210f",
|
|
|
|
|
"value": "121.141.9.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-b97c-45c5-8358-04a2950d210f",
|
|
|
|
|
"value": "121.148.26.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-ea6c-40db-b3e4-04a2950d210f",
|
|
|
|
|
"value": "121.148.91.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-7900-446d-a3a2-04a2950d210f",
|
|
|
|
|
"value": "121.150.9.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-4ea4-4ca6-b7b1-04a2950d210f",
|
|
|
|
|
"value": "121.153.51.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-bc1c-45f4-b40f-04a2950d210f",
|
|
|
|
|
"value": "121.163.58.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-3cdc-427b-b264-04a2950d210f",
|
|
|
|
|
"value": "121.176.52.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-b0a0-474f-b18a-04a2950d210f",
|
|
|
|
|
"value": "121.225.241.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-1728-4dc8-b410-04a2950d210f",
|
|
|
|
|
"value": "121.231.222.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-0ff0-4004-9792-04a2950d210f",
|
|
|
|
|
"value": "121.254.118.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-2eb4-41f5-94b2-04a2950d210f",
|
|
|
|
|
"value": "121.61.106.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-bd74-454f-94a3-04a2950d210f",
|
|
|
|
|
"value": "122.116.0.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-0a94-4d95-8547-04a2950d210f",
|
|
|
|
|
"value": "122.116.14.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-a814-4656-aac0-04a2950d210f",
|
|
|
|
|
"value": "122.116.17.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-973c-4d7b-a744-04a2950d210f",
|
|
|
|
|
"value": "122.116.218.217"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-40d0-4bfe-82b1-04a2950d210f",
|
|
|
|
|
"value": "122.117.109.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-62d4-45b2-8a34-04a2950d210f",
|
|
|
|
|
"value": "122.117.72.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-20dc-4a1a-95ab-04a2950d210f",
|
|
|
|
|
"value": "122.117.74.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123127",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b7-a47c-42f5-8263-04a2950d210f",
|
|
|
|
|
"value": "122.117.86.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-b834-47a4-92f0-04a2950d210f",
|
|
|
|
|
"value": "122.121.18.247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-c8d0-4295-b261-04a2950d210f",
|
|
|
|
|
"value": "122.252.72.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-4b2c-4d6f-bee5-04a2950d210f",
|
|
|
|
|
"value": "122.254.1.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-0b14-4d79-9fee-04a2950d210f",
|
|
|
|
|
"value": "122.254.26.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-5ba0-496d-908a-04a2950d210f",
|
|
|
|
|
"value": "122.254.27.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-a524-43c3-a7ad-04a2950d210f",
|
|
|
|
|
"value": "122.254.37.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-7360-48fb-86ad-04a2950d210f",
|
|
|
|
|
"value": "123.10.150.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-04e4-456d-a96a-04a2950d210f",
|
|
|
|
|
"value": "123.11.12.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-7df0-480a-8eb8-04a2950d210f",
|
|
|
|
|
"value": "123.11.72.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-7278-4a56-89f9-04a2950d210f",
|
|
|
|
|
"value": "123.110.13.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-4a1c-4470-9eaa-04a2950d210f",
|
|
|
|
|
"value": "123.13.0.127"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-ef8c-42cf-b3de-04a2950d210f",
|
|
|
|
|
"value": "123.150.45.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-1a74-411b-a8fb-04a2950d210f",
|
|
|
|
|
"value": "123.181.58.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-78f4-484b-b2ff-04a2950d210f",
|
|
|
|
|
"value": "123.181.64.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-7ffc-4b70-b0ac-04a2950d210f",
|
|
|
|
|
"value": "123.193.144.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-185c-491b-807d-04a2950d210f",
|
|
|
|
|
"value": "123.194.114.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-8c30-4c4d-8246-04a2950d210f",
|
|
|
|
|
"value": "123.201.108.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-5908-4f32-bf4e-04a2950d210f",
|
|
|
|
|
"value": "123.202.23.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-cf94-4d9b-a739-04a2950d210f",
|
|
|
|
|
"value": "123.204.47.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-82b0-41f7-a8ef-04a2950d210f",
|
|
|
|
|
"value": "123.205.177.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-b0a4-4b52-b9ea-04a2950d210f",
|
|
|
|
|
"value": "123.205.89.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-8ebc-4f5f-9f1d-04a2950d210f",
|
|
|
|
|
"value": "123.24.168.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-9608-4cef-8c8f-04a2950d210f",
|
|
|
|
|
"value": "123.24.94.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-1a38-4a4d-9685-04a2950d210f",
|
|
|
|
|
"value": "123.240.180.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-14a8-4689-a2e9-04a2950d210f",
|
|
|
|
|
"value": "123.241.102.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-5624-4e4d-b580-04a2950d210f",
|
|
|
|
|
"value": "123.252.229.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-9194-4812-9190-04a2950d210f",
|
|
|
|
|
"value": "123.254.138.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-e664-42c2-b202-04a2950d210f",
|
|
|
|
|
"value": "123.28.228.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-ac60-4fdf-8196-04a2950d210f",
|
|
|
|
|
"value": "123.7.161.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-ef50-49f6-bfa3-04a2950d210f",
|
|
|
|
|
"value": "125.129.60.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-8008-495b-a6dd-04a2950d210f",
|
|
|
|
|
"value": "125.141.54.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-adec-43d8-9c22-04a2950d210f",
|
|
|
|
|
"value": "125.224.145.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-eb38-41fc-9345-04a2950d210f",
|
|
|
|
|
"value": "125.224.85.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-b090-44cb-8df4-04a2950d210f",
|
|
|
|
|
"value": "125.227.22.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-0f08-4e65-933d-04a2950d210f",
|
|
|
|
|
"value": "125.227.62.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-5e38-4392-be85-04a2950d210f",
|
|
|
|
|
"value": "125.227.89.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-2820-4c63-9cad-04a2950d210f",
|
|
|
|
|
"value": "125.230.163.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-a558-4393-9938-04a2950d210f",
|
|
|
|
|
"value": "125.230.242.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-30b8-4b59-9084-04a2950d210f",
|
|
|
|
|
"value": "125.231.119.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-6ac0-4d39-9cb2-04a2950d210f",
|
|
|
|
|
"value": "125.231.133.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-5e60-443a-8ff3-04a2950d210f",
|
|
|
|
|
"value": "125.231.141.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-2090-4b33-b56d-04a2950d210f",
|
|
|
|
|
"value": "125.231.25.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-5690-499b-b12d-04a2950d210f",
|
|
|
|
|
"value": "125.231.57.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-8eb8-4ee3-9b88-04a2950d210f",
|
|
|
|
|
"value": "125.231.63.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123128",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b8-2650-4beb-a0ce-04a2950d210f",
|
|
|
|
|
"value": "125.231.81.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-9aac-4bc2-a4fd-04a2950d210f",
|
|
|
|
|
"value": "125.231.96.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-2d04-4a80-9f72-04a2950d210f",
|
|
|
|
|
"value": "125.45.9.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-d7e8-4222-9ec8-04a2950d210f",
|
|
|
|
|
"value": "126.117.22.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-2f44-405d-b70c-04a2950d210f",
|
|
|
|
|
"value": "13.82.23.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-cb24-4c98-8ec0-04a2950d210f",
|
|
|
|
|
"value": "132.255.218.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-767c-4a85-bb42-04a2950d210f",
|
|
|
|
|
"value": "134.17.139.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-21cc-41a2-956f-04a2950d210f",
|
|
|
|
|
"value": "136.34.213.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-6400-421c-a8dd-04a2950d210f",
|
|
|
|
|
"value": "138.117.163.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-2a54-4bcc-bef2-04a2950d210f",
|
|
|
|
|
"value": "138.219.33.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-b96c-4bf5-a175-04a2950d210f",
|
|
|
|
|
"value": "139.5.228.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-8ac4-4839-b009-04a2950d210f",
|
|
|
|
|
"value": "14.136.54.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-3388-4134-932b-04a2950d210f",
|
|
|
|
|
"value": "14.173.141.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-d3d0-4023-9bb3-04a2950d210f",
|
|
|
|
|
"value": "14.192.0.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-2e94-44b0-921b-04a2950d210f",
|
|
|
|
|
"value": "14.236.180.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-0214-4ef0-9bd4-04a2950d210f",
|
|
|
|
|
"value": "14.237.62.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-c30c-4e98-804c-04a2950d210f",
|
|
|
|
|
"value": "14.47.193.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-5b24-4221-b048-04a2950d210f",
|
|
|
|
|
"value": "14.48.246.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-57a8-41ea-9ee3-04a2950d210f",
|
|
|
|
|
"value": "14.50.246.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-67b8-4c20-a8c3-04a2950d210f",
|
|
|
|
|
"value": "14.53.191.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-0018-4a6b-92d4-04a2950d210f",
|
|
|
|
|
"value": "143.202.170.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-2e38-4fa1-b881-04a2950d210f",
|
|
|
|
|
"value": "151.177.173.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-ccfc-45fe-9129-04a2950d210f",
|
|
|
|
|
"value": "151.177.53.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-afd4-496e-b688-04a2950d210f",
|
|
|
|
|
"value": "152.249.235.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-6e2c-4023-b9f4-04a2950d210f",
|
|
|
|
|
"value": "153.99.108.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-1cf8-43cf-8dd3-04a2950d210f",
|
|
|
|
|
"value": "154.127.151.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-7848-44fa-9d54-04a2950d210f",
|
|
|
|
|
"value": "157.119.204.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-ac7c-48ac-be11-04a2950d210f",
|
|
|
|
|
"value": "159.65.138.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123129",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993b9-1504-4b5f-aed0-04a2950d210f",
|
|
|
|
|
"value": "163.47.143.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-7340-4d74-96a5-04a2950d210f",
|
|
|
|
|
"value": "168.70.114.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-c05c-4f67-88da-04a2950d210f",
|
|
|
|
|
"value": "168.70.35.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-4820-4edd-8abd-04a2950d210f",
|
|
|
|
|
"value": "168.70.78.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-d5dc-4caf-b99b-04a2950d210f",
|
|
|
|
|
"value": "168.70.83.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-db28-44b3-8788-04a2950d210f",
|
|
|
|
|
"value": "168.70.95.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-da18-49af-879c-04a2950d210f",
|
|
|
|
|
"value": "169.1.33.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-4dd4-421c-83ce-04a2950d210f",
|
|
|
|
|
"value": "170.231.196.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-6ad0-49f0-aa76-04a2950d210f",
|
|
|
|
|
"value": "170.231.197.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-42c4-4c6a-a958-04a2950d210f",
|
|
|
|
|
"value": "171.112.184.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-fd88-4215-ad15-04a2950d210f",
|
|
|
|
|
"value": "171.112.251.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-9230-49e9-9198-04a2950d210f",
|
|
|
|
|
"value": "171.226.192.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-9c9c-4e19-9303-04a2950d210f",
|
|
|
|
|
"value": "171.229.160.201"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-fd18-4648-be60-04a2950d210f",
|
|
|
|
|
"value": "171.229.165.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-2e58-4025-a6be-04a2950d210f",
|
|
|
|
|
"value": "171.229.165.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-75e8-4e95-91d9-04a2950d210f",
|
|
|
|
|
"value": "171.229.169.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-e378-4cba-b6be-04a2950d210f",
|
|
|
|
|
"value": "171.229.170.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-212c-447d-8f3c-04a2950d210f",
|
|
|
|
|
"value": "171.229.170.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-fdac-4bb4-8f69-04a2950d210f",
|
|
|
|
|
"value": "171.229.171.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-90d8-45b0-acd2-04a2950d210f",
|
|
|
|
|
"value": "171.229.193.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-41fc-403b-98d6-04a2950d210f",
|
|
|
|
|
"value": "171.229.228.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-88c0-434d-a5cc-04a2950d210f",
|
|
|
|
|
"value": "171.229.99.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-94d8-4bc2-a269-04a2950d210f",
|
|
|
|
|
"value": "171.232.88.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-c070-468e-b63b-04a2950d210f",
|
|
|
|
|
"value": "171.233.42.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-f290-4609-abdf-04a2950d210f",
|
|
|
|
|
"value": "171.233.84.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-e0bc-458c-a3fc-04a2950d210f",
|
|
|
|
|
"value": "171.234.179.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-c890-40b6-ba5a-04a2950d210f",
|
|
|
|
|
"value": "171.234.180.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-c5c4-41d9-8dee-04a2950d210f",
|
|
|
|
|
"value": "171.234.188.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-4714-45bc-be2a-04a2950d210f",
|
|
|
|
|
"value": "171.237.140.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-b8e4-4765-bc37-04a2950d210f",
|
|
|
|
|
"value": "171.237.140.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-2c84-4b7b-8a36-04a2950d210f",
|
|
|
|
|
"value": "171.237.141.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-de1c-4124-b502-04a2950d210f",
|
|
|
|
|
"value": "171.237.145.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-a368-4e8e-9f7c-04a2950d210f",
|
|
|
|
|
"value": "171.237.151.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-aaf8-45a1-80da-04a2950d210f",
|
|
|
|
|
"value": "171.237.153.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-df6c-4c51-b3f7-04a2950d210f",
|
|
|
|
|
"value": "171.237.154.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-7334-4ebc-93f0-04a2950d210f",
|
|
|
|
|
"value": "171.237.155.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-69fc-4c64-832c-04a2950d210f",
|
|
|
|
|
"value": "171.237.156.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-5670-4643-92ab-04a2950d210f",
|
|
|
|
|
"value": "171.242.102.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123130",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ba-79e0-4dcd-87bb-04a2950d210f",
|
|
|
|
|
"value": "171.242.105.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-698c-4e8b-aa03-04a2950d210f",
|
|
|
|
|
"value": "171.242.107.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-8f20-40c7-a18c-04a2950d210f",
|
|
|
|
|
"value": "171.242.112.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-1a74-4be8-b10c-04a2950d210f",
|
|
|
|
|
"value": "171.242.177.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-79cc-44f4-866c-04a2950d210f",
|
|
|
|
|
"value": "171.242.250.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-9b40-4180-98f2-04a2950d210f",
|
|
|
|
|
"value": "171.242.26.49"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-606c-4e88-8d5e-04a2950d210f",
|
|
|
|
|
"value": "171.242.32.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-7744-4f3f-8f54-04a2950d210f",
|
|
|
|
|
"value": "171.242.69.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-5308-4ca0-8e32-04a2950d210f",
|
|
|
|
|
"value": "171.242.79.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-7da8-4093-912b-04a2950d210f",
|
|
|
|
|
"value": "171.242.79.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-d278-41fa-93b0-04a2950d210f",
|
|
|
|
|
"value": "171.242.79.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-4cb0-4c9b-8935-04a2950d210f",
|
|
|
|
|
"value": "171.242.85.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-0008-4a71-97b2-04a2950d210f",
|
|
|
|
|
"value": "171.242.85.205"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-a610-4024-9d99-04a2950d210f",
|
|
|
|
|
"value": "171.242.86.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-b4d0-4c20-9849-04a2950d210f",
|
|
|
|
|
"value": "171.242.89.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-df4c-482e-abf5-04a2950d210f",
|
|
|
|
|
"value": "171.242.99.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-d358-4ea5-9226-04a2950d210f",
|
|
|
|
|
"value": "171.244.93.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-1270-488a-b3c5-04a2950d210f",
|
|
|
|
|
"value": "171.246.34.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-7254-489c-9a8c-04a2950d210f",
|
|
|
|
|
"value": "171.246.35.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-575c-4d09-a502-04a2950d210f",
|
|
|
|
|
"value": "171.246.54.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-1cc4-433b-a769-04a2950d210f",
|
|
|
|
|
"value": "171.246.60.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-b9a8-46e2-ac63-04a2950d210f",
|
|
|
|
|
"value": "171.246.62.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-e0bc-46e4-aaa0-04a2950d210f",
|
|
|
|
|
"value": "171.249.221.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-ae20-4df3-97a5-04a2950d210f",
|
|
|
|
|
"value": "171.252.202.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-dd90-4b90-8ba1-04a2950d210f",
|
|
|
|
|
"value": "171.252.205.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-2880-4edd-aa49-04a2950d210f",
|
|
|
|
|
"value": "171.252.207.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-27e0-43d6-9dad-04a2950d210f",
|
|
|
|
|
"value": "171.253.119.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-d6ac-4ddb-afe5-04a2950d210f",
|
|
|
|
|
"value": "171.38.145.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-70e8-4a4e-8e32-04a2950d210f",
|
|
|
|
|
"value": "171.38.147.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-84a0-4c63-b3ba-04a2950d210f",
|
|
|
|
|
"value": "171.38.148.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-251c-4724-8431-04a2950d210f",
|
|
|
|
|
"value": "171.38.148.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-5490-4882-aab8-04a2950d210f",
|
|
|
|
|
"value": "171.38.150.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-4f00-4e96-bdf1-04a2950d210f",
|
|
|
|
|
"value": "171.38.194.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-7d4c-42e3-8960-04a2950d210f",
|
|
|
|
|
"value": "171.38.195.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-8b90-4490-9225-04a2950d210f",
|
|
|
|
|
"value": "171.38.217.72"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-d238-424d-ba2d-04a2950d210f",
|
|
|
|
|
"value": "173.165.160.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-11dc-476a-b102-04a2950d210f",
|
|
|
|
|
"value": "174.53.95.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-6e24-4752-9346-04a2950d210f",
|
|
|
|
|
"value": "175.144.203.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-93ec-43f1-ad93-04a2950d210f",
|
|
|
|
|
"value": "175.180.167.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123131",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bb-6004-4a55-a705-04a2950d210f",
|
|
|
|
|
"value": "175.182.187.213"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-b224-4f0d-b10f-04a2950d210f",
|
|
|
|
|
"value": "175.202.29.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-e654-4285-a684-04a2950d210f",
|
|
|
|
|
"value": "175.204.209.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-4180-48db-bed2-04a2950d210f",
|
|
|
|
|
"value": "175.212.27.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-7ac0-42c6-acfc-04a2950d210f",
|
|
|
|
|
"value": "175.214.85.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-daf4-4e02-bc46-04a2950d210f",
|
|
|
|
|
"value": "176.103.205.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-fe70-4b96-844b-04a2950d210f",
|
|
|
|
|
"value": "176.104.183.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-8170-4d97-a550-04a2950d210f",
|
|
|
|
|
"value": "176.104.183.252"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-601c-46fd-9211-04a2950d210f",
|
|
|
|
|
"value": "176.124.103.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-773c-4303-a83e-04a2950d210f",
|
|
|
|
|
"value": "176.124.146.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-41bc-4353-b76a-04a2950d210f",
|
|
|
|
|
"value": "176.212.107.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-d3f4-4286-984c-04a2950d210f",
|
|
|
|
|
"value": "176.232.47.112"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-cc78-4f9d-ae85-04a2950d210f",
|
|
|
|
|
"value": "176.62.180.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-7778-4e49-b990-04a2950d210f",
|
|
|
|
|
"value": "176.67.12.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-a244-4461-afbe-04a2950d210f",
|
|
|
|
|
"value": "176.8.19.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-c0c8-4478-88f4-04a2950d210f",
|
|
|
|
|
"value": "176.97.48.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-50c0-42ee-a524-04a2950d210f",
|
|
|
|
|
"value": "177.10.145.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-b5e0-45d2-8216-04a2950d210f",
|
|
|
|
|
"value": "177.126.134.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-f0f0-4ded-94c9-04a2950d210f",
|
|
|
|
|
"value": "177.155.36.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-c254-466c-9804-04a2950d210f",
|
|
|
|
|
"value": "177.23.104.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-2b28-4a1f-bb49-04a2950d210f",
|
|
|
|
|
"value": "177.52.212.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-a60c-463f-84ef-04a2950d210f",
|
|
|
|
|
"value": "177.54.226.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-4510-40b8-8829-04a2950d210f",
|
|
|
|
|
"value": "177.67.74.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-ddf4-4fa1-80fd-04a2950d210f",
|
|
|
|
|
"value": "177.92.146.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-16c0-4b99-82b7-04a2950d210f",
|
|
|
|
|
"value": "178.137.91.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-fd8c-4076-a113-04a2950d210f",
|
|
|
|
|
"value": "180.122.24.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-4770-446d-9b36-04a2950d210f",
|
|
|
|
|
"value": "180.176.148.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-d400-4269-8089-04a2950d210f",
|
|
|
|
|
"value": "180.94.170.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123132",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bc-0630-47b2-9d19-04a2950d210f",
|
|
|
|
|
"value": "181.191.107.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-7388-418d-8715-04a2950d210f",
|
|
|
|
|
"value": "181.224.162.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-4db0-43cc-b0ff-04a2950d210f",
|
|
|
|
|
"value": "182.101.35.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-1f24-4b55-9812-04a2950d210f",
|
|
|
|
|
"value": "182.113.208.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-78d4-4bfd-a46a-04a2950d210f",
|
|
|
|
|
"value": "182.117.30.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-fa10-4f9d-9de7-04a2950d210f",
|
|
|
|
|
"value": "182.122.175.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-765c-4a29-bffa-04a2950d210f",
|
|
|
|
|
"value": "182.18.249.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-ba78-4d0b-b014-04a2950d210f",
|
|
|
|
|
"value": "182.19.180.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-9054-4586-8adf-04a2950d210f",
|
|
|
|
|
"value": "182.237.175.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-6030-4638-b750-04a2950d210f",
|
|
|
|
|
"value": "182.241.151.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-4a1c-4f79-81c8-04a2950d210f",
|
|
|
|
|
"value": "182.31.244.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-ba88-427d-aeb7-04a2950d210f",
|
|
|
|
|
"value": "183.104.240.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-3c40-4b96-9d1d-04a2950d210f",
|
|
|
|
|
"value": "183.105.5.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-a3b4-40c1-9774-04a2950d210f",
|
|
|
|
|
"value": "183.15.91.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-9680-4be8-810b-04a2950d210f",
|
|
|
|
|
"value": "183.80.89.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-273c-4b7c-acec-04a2950d210f",
|
|
|
|
|
"value": "183.82.61.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-d458-446d-9ab6-04a2950d210f",
|
|
|
|
|
"value": "183.99.89.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-6fcc-4eb7-aed3-04a2950d210f",
|
|
|
|
|
"value": "185.233.24.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-3a6c-4b0b-aa51-04a2950d210f",
|
|
|
|
|
"value": "185.233.26.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-957c-4a8c-bf16-04a2950d210f",
|
|
|
|
|
"value": "186.188.244.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-5038-4959-a2cc-04a2950d210f",
|
|
|
|
|
"value": "186.5.36.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-bb2c-4874-8b19-04a2950d210f",
|
|
|
|
|
"value": "187.114.1.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-b900-483b-813a-04a2950d210f",
|
|
|
|
|
"value": "187.162.57.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-7420-4f68-888b-04a2950d210f",
|
|
|
|
|
"value": "187.183.218.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-8e58-4348-b6b7-04a2950d210f",
|
|
|
|
|
"value": "187.19.11.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-b3f0-4d20-b85f-04a2950d210f",
|
|
|
|
|
"value": "187.45.106.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-81e0-4c14-9714-04a2950d210f",
|
|
|
|
|
"value": "187.85.13.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-09b0-4b55-bdd0-04a2950d210f",
|
|
|
|
|
"value": "188.148.185.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-d8e8-4551-a1d6-04a2950d210f",
|
|
|
|
|
"value": "188.148.236.87"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-0b60-40f2-a49f-04a2950d210f",
|
|
|
|
|
"value": "188.190.69.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-c5dc-4953-9d9e-04a2950d210f",
|
|
|
|
|
"value": "188.230.154.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-8d80-4375-b7d6-04a2950d210f",
|
|
|
|
|
"value": "190.104.246.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-ac28-4e15-9312-04a2950d210f",
|
|
|
|
|
"value": "190.240.96.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123133",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bd-aaa0-4ca8-bea9-04a2950d210f",
|
|
|
|
|
"value": "190.85.212.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-9150-4593-a38d-04a2950d210f",
|
|
|
|
|
"value": "191.240.204.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-6148-4157-9f99-04a2950d210f",
|
|
|
|
|
"value": "191.36.185.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-c97c-468b-9096-04a2950d210f",
|
|
|
|
|
"value": "191.6.80.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-13dc-46b6-969a-04a2950d210f",
|
|
|
|
|
"value": "192.121.130.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-5458-41d3-93df-04a2950d210f",
|
|
|
|
|
"value": "193.106.57.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-da04-40ab-b137-04a2950d210f",
|
|
|
|
|
"value": "193.138.146.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-8974-4e30-ade4-04a2950d210f",
|
|
|
|
|
"value": "194.14.48.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-2c68-4047-8531-04a2950d210f",
|
|
|
|
|
"value": "196.61.36.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-07f4-4f19-a1ab-04a2950d210f",
|
|
|
|
|
"value": "197.232.52.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-e598-401e-9b81-04a2950d210f",
|
|
|
|
|
"value": "2.38.3.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-e25c-4ba0-8b33-04a2950d210f",
|
|
|
|
|
"value": "2.38.63.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-4344-4362-b4df-04a2950d210f",
|
|
|
|
|
"value": "203.123.106.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-fcf4-4ef7-9f90-04a2950d210f",
|
|
|
|
|
"value": "203.218.101.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-6004-4ad8-8351-04a2950d210f",
|
|
|
|
|
"value": "203.218.184.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-bfd8-4ed8-a029-04a2950d210f",
|
|
|
|
|
"value": "203.218.194.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-5658-4408-baeb-04a2950d210f",
|
|
|
|
|
"value": "203.218.245.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-7680-4f20-af22-04a2950d210f",
|
|
|
|
|
"value": "203.218.253.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-a048-4c44-858f-04a2950d210f",
|
|
|
|
|
"value": "203.218.66.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-6e68-4cca-8cf9-04a2950d210f",
|
|
|
|
|
"value": "203.218.66.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-1f24-4f76-81d7-04a2950d210f",
|
|
|
|
|
"value": "203.234.99.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-6f5c-48cd-9605-04a2950d210f",
|
|
|
|
|
"value": "203.74.120.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123134",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993be-7fa0-47f9-a953-04a2950d210f",
|
|
|
|
|
"value": "206.74.137.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-9acc-4e9d-b59e-04a2950d210f",
|
|
|
|
|
"value": "210.195.250.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-d288-4d19-9505-04a2950d210f",
|
|
|
|
|
"value": "210.203.125.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-2388-4d54-9010-04a2950d210f",
|
|
|
|
|
"value": "210.209.184.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-8ba4-414f-92dd-04a2950d210f",
|
|
|
|
|
"value": "210.209.192.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-c9e4-4060-897b-04a2950d210f",
|
|
|
|
|
"value": "210.209.211.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-319c-4d44-a54c-04a2950d210f",
|
|
|
|
|
"value": "210.223.93.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-7ff0-4c3d-9ebd-04a2950d210f",
|
|
|
|
|
"value": "210.245.33.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-aa04-4fc9-97b3-04a2950d210f",
|
|
|
|
|
"value": "211.172.61.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-430c-49fe-b642-04a2950d210f",
|
|
|
|
|
"value": "211.185.111.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-edc0-4ba3-9d68-04a2950d210f",
|
|
|
|
|
"value": "211.193.60.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-d0a8-4655-9df7-04a2950d210f",
|
|
|
|
|
"value": "211.195.197.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-bf58-4cd3-b1fa-04a2950d210f",
|
|
|
|
|
"value": "211.206.20.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-c694-4770-a394-04a2950d210f",
|
|
|
|
|
"value": "211.218.31.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-99f0-4a4f-aba0-04a2950d210f",
|
|
|
|
|
"value": "211.219.197.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-05c8-4a53-b8ee-04a2950d210f",
|
|
|
|
|
"value": "211.22.182.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-e84c-49fb-a774-04a2950d210f",
|
|
|
|
|
"value": "211.22.182.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-6bc4-4576-9d1e-04a2950d210f",
|
|
|
|
|
"value": "211.23.158.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-df58-417d-93a6-04a2950d210f",
|
|
|
|
|
"value": "211.23.16.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-66d8-4439-858a-04a2950d210f",
|
|
|
|
|
"value": "211.230.123.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-4de0-4352-9f7e-04a2950d210f",
|
|
|
|
|
"value": "211.61.205.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-9378-435c-be93-04a2950d210f",
|
|
|
|
|
"value": "211.72.115.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-24fc-48d0-862c-04a2950d210f",
|
|
|
|
|
"value": "211.72.230.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-710c-41be-b923-04a2950d210f",
|
|
|
|
|
"value": "211.75.181.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-3e5c-4bca-b8e3-04a2950d210f",
|
|
|
|
|
"value": "213.112.73.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-6974-4f4d-9fa1-04a2950d210f",
|
|
|
|
|
"value": "213.238.240.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-2ff0-4909-b97d-04a2950d210f",
|
|
|
|
|
"value": "213.6.129.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-1000-4bfe-b3ee-04a2950d210f",
|
|
|
|
|
"value": "217.211.149.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-6b44-4352-b9f4-04a2950d210f",
|
|
|
|
|
"value": "218.102.218.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-cab0-4717-9609-04a2950d210f",
|
|
|
|
|
"value": "218.102.233.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-d154-4540-87ac-04a2950d210f",
|
|
|
|
|
"value": "218.102.76.23"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-5a8c-4451-944a-04a2950d210f",
|
|
|
|
|
"value": "218.103.138.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-70c0-47fc-aefa-04a2950d210f",
|
|
|
|
|
"value": "218.103.177.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-d5b0-43eb-bf94-04a2950d210f",
|
|
|
|
|
"value": "218.161.123.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-e274-4e60-bf86-04a2950d210f",
|
|
|
|
|
"value": "218.161.86.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-a6ec-4ae7-b177-04a2950d210f",
|
|
|
|
|
"value": "218.164.52.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-a778-4957-a01a-04a2950d210f",
|
|
|
|
|
"value": "218.164.58.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-781c-4d21-8d9e-04a2950d210f",
|
|
|
|
|
"value": "218.164.8.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-eb94-4c1c-93ae-04a2950d210f",
|
|
|
|
|
"value": "218.166.241.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-f820-4014-8819-04a2950d210f",
|
|
|
|
|
"value": "218.173.109.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-0598-4321-b62b-04a2950d210f",
|
|
|
|
|
"value": "218.173.238.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-2010-4ea9-bfd5-04a2950d210f",
|
|
|
|
|
"value": "218.173.48.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-db98-4f64-be7a-04a2950d210f",
|
|
|
|
|
"value": "218.173.51.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-20f0-41da-b2a1-04a2950d210f",
|
|
|
|
|
"value": "218.191.190.224"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-ca80-4e3c-b2f1-04a2950d210f",
|
|
|
|
|
"value": "218.191.239.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-3874-4fee-9e62-04a2950d210f",
|
|
|
|
|
"value": "218.250.16.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-08cc-4d89-be40-04a2950d210f",
|
|
|
|
|
"value": "218.250.161.127"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123135",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993bf-f3c8-45ea-a211-04a2950d210f",
|
|
|
|
|
"value": "218.250.180.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-2a44-44d7-b8ef-04a2950d210f",
|
|
|
|
|
"value": "218.250.251.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-33c4-42b5-bc74-04a2950d210f",
|
|
|
|
|
"value": "218.250.61.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-0d0c-428e-b9f7-04a2950d210f",
|
|
|
|
|
"value": "218.250.98.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-a9ec-4314-a73c-04a2950d210f",
|
|
|
|
|
"value": "218.32.44.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-92bc-411a-abfd-04a2950d210f",
|
|
|
|
|
"value": "218.35.80.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-39d4-4bbc-99d4-04a2950d210f",
|
|
|
|
|
"value": "218.6.244.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-e6b4-4795-8325-04a2950d210f",
|
|
|
|
|
"value": "218.86.199.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-95e0-40e0-9f9e-04a2950d210f",
|
|
|
|
|
"value": "219.155.158.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-dce8-4fcc-81cd-04a2950d210f",
|
|
|
|
|
"value": "219.155.175.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-bbf4-470a-9971-04a2950d210f",
|
|
|
|
|
"value": "219.73.26.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-f944-4d7b-a6fa-04a2950d210f",
|
|
|
|
|
"value": "219.77.62.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-aca8-4c24-9a7c-04a2950d210f",
|
|
|
|
|
"value": "219.78.17.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-0048-460f-88e0-04a2950d210f",
|
|
|
|
|
"value": "219.78.64.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-8ee0-4240-9e0e-04a2950d210f",
|
|
|
|
|
"value": "219.78.79.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-f4d4-481c-b697-04a2950d210f",
|
|
|
|
|
"value": "219.78.95.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-0ac0-47f1-bbbe-04a2950d210f",
|
|
|
|
|
"value": "219.79.1.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-5f08-4026-8b4f-04a2950d210f",
|
|
|
|
|
"value": "219.79.123.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-f7a8-419b-b931-04a2950d210f",
|
|
|
|
|
"value": "219.79.177.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-ee78-4f74-8ffd-04a2950d210f",
|
|
|
|
|
"value": "219.79.182.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-2244-406e-ae21-04a2950d210f",
|
|
|
|
|
"value": "219.79.20.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-5f48-40ff-8790-04a2950d210f",
|
|
|
|
|
"value": "219.79.202.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123136",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c0-56bc-4b09-b1b0-04a2950d210f",
|
|
|
|
|
"value": "219.85.125.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-a7c0-46ce-b4b5-04a2950d210f",
|
|
|
|
|
"value": "220.124.181.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-5b08-4e8c-89cf-04a2950d210f",
|
|
|
|
|
"value": "220.124.89.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-088c-439b-8118-04a2950d210f",
|
|
|
|
|
"value": "220.129.186.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-52e8-4d9f-ad0d-04a2950d210f",
|
|
|
|
|
"value": "220.129.53.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-eb10-4db6-bf7b-04a2950d210f",
|
|
|
|
|
"value": "220.132.118.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-f61c-4d07-8b8d-04a2950d210f",
|
|
|
|
|
"value": "220.132.57.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-bda0-4d61-950d-04a2950d210f",
|
|
|
|
|
"value": "220.132.84.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-670c-4e7a-94d6-04a2950d210f",
|
|
|
|
|
"value": "220.133.202.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-174c-4824-a6d4-04a2950d210f",
|
|
|
|
|
"value": "220.133.219.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-cf38-4323-9717-04a2950d210f",
|
|
|
|
|
"value": "220.133.234.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-6514-4cc6-bc81-04a2950d210f",
|
|
|
|
|
"value": "220.133.40.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-5770-46f9-a018-04a2950d210f",
|
|
|
|
|
"value": "220.133.45.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-978c-40c3-9cc4-04a2950d210f",
|
|
|
|
|
"value": "220.133.64.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-1f6c-49a0-937d-04a2950d210f",
|
|
|
|
|
"value": "220.134.142.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-d8c4-4c4a-b1b9-04a2950d210f",
|
|
|
|
|
"value": "220.134.206.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-1384-4437-b5e4-04a2950d210f",
|
|
|
|
|
"value": "220.135.145.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-4ddc-4c27-943e-04a2950d210f",
|
|
|
|
|
"value": "220.135.156.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-18b8-4ef3-9047-04a2950d210f",
|
|
|
|
|
"value": "220.136.148.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-7260-41f9-be9f-04a2950d210f",
|
|
|
|
|
"value": "220.136.85.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-adf4-4d00-8f10-04a2950d210f",
|
|
|
|
|
"value": "220.137.91.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-d8f4-424a-b650-04a2950d210f",
|
|
|
|
|
"value": "220.141.174.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-bb30-4321-ac3e-04a2950d210f",
|
|
|
|
|
"value": "220.141.80.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-0248-44b7-a700-04a2950d210f",
|
|
|
|
|
"value": "220.142.162.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-d000-480c-8814-04a2950d210f",
|
|
|
|
|
"value": "220.142.174.42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-2294-4b95-9124-04a2950d210f",
|
|
|
|
|
"value": "220.142.62.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-9e34-4345-8a3b-04a2950d210f",
|
|
|
|
|
"value": "220.237.138.136"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-a038-4c99-9b35-04a2950d210f",
|
|
|
|
|
"value": "220.81.251.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-54ec-458e-9b1c-04a2950d210f",
|
|
|
|
|
"value": "220.95.57.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-414c-45ce-bf8f-04a2950d210f",
|
|
|
|
|
"value": "221.115.136.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-fe78-4eee-8aee-04a2950d210f",
|
|
|
|
|
"value": "221.124.111.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-701c-4047-8f39-04a2950d210f",
|
|
|
|
|
"value": "221.124.74.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-26ec-4ef9-96c7-04a2950d210f",
|
|
|
|
|
"value": "221.127.10.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-8a34-4d48-bdb3-04a2950d210f",
|
|
|
|
|
"value": "221.127.115.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-af18-47d6-998a-04a2950d210f",
|
|
|
|
|
"value": "221.127.125.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-20b0-47fb-bfef-04a2950d210f",
|
|
|
|
|
"value": "221.127.13.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-a6e0-4ee3-ad7b-04a2950d210f",
|
|
|
|
|
"value": "221.127.17.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-6b2c-4ffc-b353-04a2950d210f",
|
|
|
|
|
"value": "221.127.38.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123137",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c1-5ad4-4e6d-b709-04a2950d210f",
|
|
|
|
|
"value": "221.127.58.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-2c28-4958-ae8f-04a2950d210f",
|
|
|
|
|
"value": "221.138.149.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-fa2c-4ba1-9bf9-04a2950d210f",
|
|
|
|
|
"value": "221.153.218.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-ad48-4077-85b9-04a2950d210f",
|
|
|
|
|
"value": "221.208.204.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-9800-454c-be2b-04a2950d210f",
|
|
|
|
|
"value": "222.100.102.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-561c-4331-99c7-04a2950d210f",
|
|
|
|
|
"value": "222.134.5.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-c3a0-4931-a8a7-04a2950d210f",
|
|
|
|
|
"value": "222.139.204.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-01f0-4979-83fa-04a2950d210f",
|
|
|
|
|
"value": "222.139.65.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-6368-4119-983f-04a2950d210f",
|
|
|
|
|
"value": "222.140.155.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-6aa4-4047-8612-04a2950d210f",
|
|
|
|
|
"value": "222.141.10.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-79d0-45c6-8d03-04a2950d210f",
|
|
|
|
|
"value": "222.164.135.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-d618-4ce0-9c8e-04a2950d210f",
|
|
|
|
|
"value": "222.187.28.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-e4f4-4727-95e7-04a2950d210f",
|
|
|
|
|
"value": "222.212.84.222"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-d48c-4401-ac67-04a2950d210f",
|
|
|
|
|
"value": "222.236.151.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-5928-41f4-a231-04a2950d210f",
|
|
|
|
|
"value": "223.16.103.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-c66c-4286-97c5-04a2950d210f",
|
|
|
|
|
"value": "223.16.53.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-8c10-4e9c-9236-04a2950d210f",
|
|
|
|
|
"value": "223.16.82.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-57d4-4144-b397-04a2950d210f",
|
|
|
|
|
"value": "223.16.85.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-6ef0-47cc-b8c2-04a2950d210f",
|
|
|
|
|
"value": "223.17.141.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-b868-466e-8fbf-04a2950d210f",
|
|
|
|
|
"value": "223.17.179.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-49f0-483e-9f14-04a2950d210f",
|
|
|
|
|
"value": "223.17.182.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-43f0-49b0-a773-04a2950d210f",
|
|
|
|
|
"value": "223.17.75.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-8a70-4564-9cce-04a2950d210f",
|
|
|
|
|
"value": "223.17.97.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-ae88-4ce6-9467-04a2950d210f",
|
|
|
|
|
"value": "223.18.109.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-6a08-4945-9cb2-04a2950d210f",
|
|
|
|
|
"value": "223.18.123.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-9588-4c67-b1e1-04a2950d210f",
|
|
|
|
|
"value": "223.18.144.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-94cc-4f1a-a929-04a2950d210f",
|
|
|
|
|
"value": "223.18.206.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-3f4c-4e8e-8613-04a2950d210f",
|
|
|
|
|
"value": "223.18.233.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-5c98-4f11-bdc4-04a2950d210f",
|
|
|
|
|
"value": "223.18.238.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-5fb0-4803-94eb-04a2950d210f",
|
|
|
|
|
"value": "223.18.240.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-3d78-464f-a8c0-04a2950d210f",
|
|
|
|
|
"value": "223.29.199.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-a1a0-42d7-8bb1-04a2950d210f",
|
|
|
|
|
"value": "23.233.126.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-0c28-4305-8f52-04a2950d210f",
|
|
|
|
|
"value": "23.98.217.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-1180-4fab-860e-04a2950d210f",
|
|
|
|
|
"value": "24.207.31.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-355c-43c8-ad81-04a2950d210f",
|
|
|
|
|
"value": "24.222.173.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-652c-47b5-820b-04a2950d210f",
|
|
|
|
|
"value": "24.230.162.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-9cc8-4483-9531-04a2950d210f",
|
|
|
|
|
"value": "24.231.46.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123138",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c2-157c-469c-a5d7-04a2950d210f",
|
|
|
|
|
"value": "27.10.115.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-da80-4c9f-a058-04a2950d210f",
|
|
|
|
|
"value": "27.106.103.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-5eb0-463f-8036-04a2950d210f",
|
|
|
|
|
"value": "27.2.101.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-3bb4-4edd-bde5-04a2950d210f",
|
|
|
|
|
"value": "27.2.159.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-556c-476f-b3f5-04a2950d210f",
|
|
|
|
|
"value": "27.3.44.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-792c-4e3b-96ec-04a2950d210f",
|
|
|
|
|
"value": "27.66.88.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-2a30-4b48-8839-04a2950d210f",
|
|
|
|
|
"value": "27.66.89.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-e134-4b5d-a997-04a2950d210f",
|
|
|
|
|
"value": "27.66.89.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-1e98-4687-a39d-04a2950d210f",
|
|
|
|
|
"value": "27.68.20.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-1104-4002-ac5b-04a2950d210f",
|
|
|
|
|
"value": "27.76.210.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-c864-4a8a-b873-04a2950d210f",
|
|
|
|
|
"value": "27.76.211.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-7304-4569-a96c-04a2950d210f",
|
|
|
|
|
"value": "27.76.211.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-4fdc-44bb-87ce-04a2950d210f",
|
|
|
|
|
"value": "27.76.216.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-7f30-4ea5-85f9-04a2950d210f",
|
|
|
|
|
"value": "27.76.217.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-1dd8-41b7-99bb-04a2950d210f",
|
|
|
|
|
"value": "27.76.221.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-a8f8-4b7e-a7c5-04a2950d210f",
|
|
|
|
|
"value": "27.76.222.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-5e1c-4865-96c3-04a2950d210f",
|
|
|
|
|
"value": "27.77.238.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-bc94-4ad9-9f62-04a2950d210f",
|
|
|
|
|
"value": "31.168.72.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-f130-4510-b781-04a2950d210f",
|
|
|
|
|
"value": "31.208.114.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-154c-437b-a9a6-04a2950d210f",
|
|
|
|
|
"value": "31.208.16.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-2f04-44c4-be92-04a2950d210f",
|
|
|
|
|
"value": "34.198.11.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-4170-414c-88be-04a2950d210f",
|
|
|
|
|
"value": "35.180.133.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-7054-4cbd-9673-04a2950d210f",
|
|
|
|
|
"value": "36.224.204.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-dce4-4070-a400-04a2950d210f",
|
|
|
|
|
"value": "36.225.20.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-7cb8-4c0f-8f38-04a2950d210f",
|
|
|
|
|
"value": "36.225.42.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-ea4c-417a-9e36-04a2950d210f",
|
|
|
|
|
"value": "36.225.83.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-5244-4a64-9820-04a2950d210f",
|
|
|
|
|
"value": "36.226.130.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-4ed0-47c5-a40d-04a2950d210f",
|
|
|
|
|
"value": "36.226.183.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-807c-4fed-946d-04a2950d210f",
|
|
|
|
|
"value": "36.226.21.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-10d4-4aca-b38e-04a2950d210f",
|
|
|
|
|
"value": "36.226.25.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-6224-4950-9ba9-04a2950d210f",
|
|
|
|
|
"value": "36.226.68.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-3a14-44c4-97b6-04a2950d210f",
|
|
|
|
|
"value": "36.227.26.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-86b4-492d-8f30-04a2950d210f",
|
|
|
|
|
"value": "36.227.62.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-a81c-41e5-9bef-04a2950d210f",
|
|
|
|
|
"value": "36.228.128.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-a148-4a9e-a4c0-04a2950d210f",
|
|
|
|
|
"value": "36.228.254.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-2558-4a18-b1b8-04a2950d210f",
|
|
|
|
|
"value": "36.229.131.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-563c-489d-ab71-04a2950d210f",
|
|
|
|
|
"value": "36.229.200.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-45e4-43d5-b956-04a2950d210f",
|
|
|
|
|
"value": "36.230.151.157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-73c8-4453-a151-04a2950d210f",
|
|
|
|
|
"value": "36.231.218.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-3a08-4d85-b99f-04a2950d210f",
|
|
|
|
|
"value": "36.232.117.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-b8cc-431d-a69c-04a2950d210f",
|
|
|
|
|
"value": "36.232.127.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123139",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c3-ddb8-44ee-941f-04a2950d210f",
|
|
|
|
|
"value": "36.232.168.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-a368-4524-bf04-04a2950d210f",
|
|
|
|
|
"value": "36.232.174.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-e514-499a-bd97-04a2950d210f",
|
|
|
|
|
"value": "36.232.44.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-cd70-49be-8b98-04a2950d210f",
|
|
|
|
|
"value": "36.232.78.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-2f88-4334-9623-04a2950d210f",
|
|
|
|
|
"value": "36.233.132.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-6aec-406d-a1e5-04a2950d210f",
|
|
|
|
|
"value": "36.233.14.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-0150-4a37-a231-04a2950d210f",
|
|
|
|
|
"value": "36.233.48.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-5a04-4380-919e-04a2950d210f",
|
|
|
|
|
"value": "36.234.222.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-ddbc-4a2e-ace7-04a2950d210f",
|
|
|
|
|
"value": "36.234.23.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-a4ac-4831-a182-04a2950d210f",
|
|
|
|
|
"value": "36.235.113.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-960c-41f0-add0-04a2950d210f",
|
|
|
|
|
"value": "36.235.162.72"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-8f84-475e-9fd0-04a2950d210f",
|
|
|
|
|
"value": "36.235.45.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-3624-4604-b07c-04a2950d210f",
|
|
|
|
|
"value": "36.236.130.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-25c8-4c6d-a66e-04a2950d210f",
|
|
|
|
|
"value": "36.236.135.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-6fa8-4153-9ee2-04a2950d210f",
|
|
|
|
|
"value": "36.236.19.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-707c-4789-97c4-04a2950d210f",
|
|
|
|
|
"value": "36.236.9.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-6980-4e9d-978d-04a2950d210f",
|
|
|
|
|
"value": "36.237.211.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-3550-4008-824a-04a2950d210f",
|
|
|
|
|
"value": "36.237.36.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-bd4c-46f7-b35c-04a2950d210f",
|
|
|
|
|
"value": "36.237.90.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-779c-421f-b550-04a2950d210f",
|
|
|
|
|
"value": "36.238.109.247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-98f4-4aaa-a5a3-04a2950d210f",
|
|
|
|
|
"value": "36.238.26.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-4c2c-4b3f-ac58-04a2950d210f",
|
|
|
|
|
"value": "36.238.49.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-6f80-4246-9782-04a2950d210f",
|
|
|
|
|
"value": "36.238.61.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-15b0-4e16-bb30-04a2950d210f",
|
|
|
|
|
"value": "36.238.61.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-db08-44ed-8765-04a2950d210f",
|
|
|
|
|
"value": "36.239.73.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-d448-43b9-afcd-04a2950d210f",
|
|
|
|
|
"value": "36.24.28.87"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-67b0-4080-bdaf-04a2950d210f",
|
|
|
|
|
"value": "36.32.105.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-c4d4-4257-b001-04a2950d210f",
|
|
|
|
|
"value": "36.39.225.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-c07c-4c4b-a6fd-04a2950d210f",
|
|
|
|
|
"value": "37.112.49.32"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-8678-4b5f-9e2d-04a2950d210f",
|
|
|
|
|
"value": "37.191.134.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-00cc-4648-80dc-04a2950d210f",
|
|
|
|
|
"value": "37.191.139.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-411c-44e1-8450-04a2950d210f",
|
|
|
|
|
"value": "37.229.73.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-683c-462e-a2e4-04a2950d210f",
|
|
|
|
|
"value": "37.72.50.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-96f8-4d03-adba-04a2950d210f",
|
|
|
|
|
"value": "39.68.115.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-f6c8-4d04-b44c-04a2950d210f",
|
|
|
|
|
"value": "42.115.224.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-d12c-41c5-8de1-04a2950d210f",
|
|
|
|
|
"value": "42.119.180.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-4690-4cd3-b385-04a2950d210f",
|
|
|
|
|
"value": "42.119.239.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-9710-4d44-8da7-04a2950d210f",
|
|
|
|
|
"value": "42.2.14.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-f51c-4115-bed5-04a2950d210f",
|
|
|
|
|
"value": "42.2.156.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-1dcc-4548-9d1f-04a2950d210f",
|
|
|
|
|
"value": "42.2.182.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-22f0-485a-a159-04a2950d210f",
|
|
|
|
|
"value": "42.2.255.89"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-b2e4-495f-b2a3-04a2950d210f",
|
|
|
|
|
"value": "42.2.86.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-dee4-4653-ab96-04a2950d210f",
|
|
|
|
|
"value": "42.227.185.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123140",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c4-5a40-459d-b2cf-04a2950d210f",
|
|
|
|
|
"value": "42.230.204.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-d918-4a16-852e-04a2950d210f",
|
|
|
|
|
"value": "42.239.124.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-27a8-48bc-94d0-04a2950d210f",
|
|
|
|
|
"value": "42.239.238.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-fa84-46b4-aefb-04a2950d210f",
|
|
|
|
|
"value": "42.3.156.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-8f84-4a67-be74-04a2950d210f",
|
|
|
|
|
"value": "42.3.82.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-cef8-4c3d-ab17-04a2950d210f",
|
|
|
|
|
"value": "42.98.108.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-b430-447d-a09c-04a2950d210f",
|
|
|
|
|
"value": "42.98.179.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-4314-44e6-a32d-04a2950d210f",
|
|
|
|
|
"value": "42.98.218.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-8288-4cac-8cf5-04a2950d210f",
|
|
|
|
|
"value": "42.98.221.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-a48c-4114-88c5-04a2950d210f",
|
|
|
|
|
"value": "42.98.51.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-302c-4daa-ab53-04a2950d210f",
|
|
|
|
|
"value": "43.243.142.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-1104-4182-b75f-04a2950d210f",
|
|
|
|
|
"value": "45.124.48.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-c174-4dff-9b82-04a2950d210f",
|
|
|
|
|
"value": "45.224.164.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-0cc0-45f1-a8a7-04a2950d210f",
|
|
|
|
|
"value": "45.228.214.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-7e74-43c9-a53b-04a2950d210f",
|
|
|
|
|
"value": "45.228.215.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123141",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c5-29f8-42f6-a1f2-04a2950d210f",
|
|
|
|
|
"value": "45.228.253.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-4cec-4805-83b0-04a2950d210f",
|
|
|
|
|
"value": "45.251.116.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-7c9c-4995-b5af-04a2950d210f",
|
|
|
|
|
"value": "45.44.49.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-e5f0-47a8-8a76-04a2950d210f",
|
|
|
|
|
"value": "45.74.103.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-3cc0-4665-920c-04a2950d210f",
|
|
|
|
|
"value": "45.84.187.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-9bd0-4aaa-8002-04a2950d210f",
|
|
|
|
|
"value": "46.109.197.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-54bc-4e0f-92e0-04a2950d210f",
|
|
|
|
|
"value": "46.173.4.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-de3c-41c4-aa18-04a2950d210f",
|
|
|
|
|
"value": "46.185.86.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-ec94-4ae2-9d8b-04a2950d210f",
|
|
|
|
|
"value": "46.72.128.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-1ed0-4327-90d8-04a2950d210f",
|
|
|
|
|
"value": "46.72.145.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-1b04-4adc-bfa3-04a2950d210f",
|
|
|
|
|
"value": "46.73.124.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-530c-4384-b2fd-04a2950d210f",
|
|
|
|
|
"value": "49.113.247.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-1a9c-4286-9a87-04a2950d210f",
|
|
|
|
|
"value": "49.147.129.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-c028-436e-8e0e-04a2950d210f",
|
|
|
|
|
"value": "49.158.197.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-ff9c-4953-a68e-04a2950d210f",
|
|
|
|
|
"value": "49.159.93.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-5f7c-4801-a956-04a2950d210f",
|
|
|
|
|
"value": "49.207.178.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-b6f4-41ea-a335-04a2950d210f",
|
|
|
|
|
"value": "49.213.161.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-527c-40e8-b0f8-04a2950d210f",
|
|
|
|
|
"value": "49.213.171.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-aeac-459f-b98a-04a2950d210f",
|
|
|
|
|
"value": "49.213.178.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-cb14-4d04-bfe9-04a2950d210f",
|
|
|
|
|
"value": "49.213.189.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-4498-4892-b9a6-04a2950d210f",
|
|
|
|
|
"value": "49.213.193.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-a8ec-4d54-bd27-04a2950d210f",
|
|
|
|
|
"value": "49.213.204.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-3724-42ad-bc66-04a2950d210f",
|
|
|
|
|
"value": "49.246.3.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-c318-4fc9-9a4f-04a2950d210f",
|
|
|
|
|
"value": "49.254.189.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-5090-4e53-9adc-04a2950d210f",
|
|
|
|
|
"value": "49.89.195.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-7ae4-40b0-8ef2-04a2950d210f",
|
|
|
|
|
"value": "5.165.80.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123142",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c6-b76c-4f32-80d0-04a2950d210f",
|
|
|
|
|
"value": "5.248.63.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-9424-40ec-a892-04a2950d210f",
|
|
|
|
|
"value": "5.8.206.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-0804-4814-bbc3-04a2950d210f",
|
|
|
|
|
"value": "54.210.118.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-315c-4ef8-a38b-04a2950d210f",
|
|
|
|
|
"value": "58.152.135.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-f4c0-44f7-be92-04a2950d210f",
|
|
|
|
|
"value": "58.152.156.126"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-6060-4b70-9bc9-04a2950d210f",
|
|
|
|
|
"value": "58.152.198.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-b42c-463b-834a-04a2950d210f",
|
|
|
|
|
"value": "58.153.114.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-0d0c-4406-8fdd-04a2950d210f",
|
|
|
|
|
"value": "58.153.12.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-2614-4911-9ab8-04a2950d210f",
|
|
|
|
|
"value": "58.153.20.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-7808-46bc-96b4-04a2950d210f",
|
|
|
|
|
"value": "58.153.202.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-b2b0-4c41-9b54-04a2950d210f",
|
|
|
|
|
"value": "58.153.224.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-9ac8-4b4d-8956-04a2950d210f",
|
|
|
|
|
"value": "58.153.225.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-bb98-4285-b12a-04a2950d210f",
|
|
|
|
|
"value": "58.153.7.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-3e70-48c5-93e3-04a2950d210f",
|
|
|
|
|
"value": "58.182.94.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-5450-48f0-ab24-04a2950d210f",
|
|
|
|
|
"value": "58.212.110.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-5da8-4009-8068-04a2950d210f",
|
|
|
|
|
"value": "58.227.118.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-6d20-4d4f-9ba4-04a2950d210f",
|
|
|
|
|
"value": "59.1.189.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-2328-4512-a9c3-04a2950d210f",
|
|
|
|
|
"value": "59.115.140.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-4f54-4df6-8caa-04a2950d210f",
|
|
|
|
|
"value": "59.115.170.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-2454-46e0-b7e2-04a2950d210f",
|
|
|
|
|
"value": "59.115.227.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-06f4-497b-82f5-04a2950d210f",
|
|
|
|
|
"value": "59.120.106.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-99cc-47e4-8222-04a2950d210f",
|
|
|
|
|
"value": "59.125.65.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-815c-4c70-9f4f-04a2950d210f",
|
|
|
|
|
"value": "59.126.117.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-f958-4167-95f4-04a2950d210f",
|
|
|
|
|
"value": "59.126.129.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-9698-425e-be1a-04a2950d210f",
|
|
|
|
|
"value": "59.126.164.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-32fc-4b15-a080-04a2950d210f",
|
|
|
|
|
"value": "59.126.190.15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-47f8-49cd-b274-04a2950d210f",
|
|
|
|
|
"value": "59.126.212.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-8e74-469f-b4f7-04a2950d210f",
|
|
|
|
|
"value": "59.126.222.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-e940-4092-b790-04a2950d210f",
|
|
|
|
|
"value": "59.126.230.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-c6b4-4aef-b2e4-04a2950d210f",
|
|
|
|
|
"value": "59.126.54.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-0138-43ea-9467-04a2950d210f",
|
|
|
|
|
"value": "59.126.63.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-8244-4c8b-b9f0-04a2950d210f",
|
|
|
|
|
"value": "59.127.10.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-9c94-4cb0-80d7-04a2950d210f",
|
|
|
|
|
"value": "59.127.123.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-4118-4a27-a368-04a2950d210f",
|
|
|
|
|
"value": "59.127.171.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-201c-44f2-88e5-04a2950d210f",
|
|
|
|
|
"value": "59.127.235.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-2b94-4c1d-b79d-04a2950d210f",
|
|
|
|
|
"value": "59.127.250.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-f2dc-41c1-bf12-04a2950d210f",
|
|
|
|
|
"value": "59.127.53.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-ef44-49a4-8074-04a2950d210f",
|
|
|
|
|
"value": "59.127.53.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-d248-4197-bc6d-04a2950d210f",
|
|
|
|
|
"value": "59.127.74.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-1bb0-43e8-bfdd-04a2950d210f",
|
|
|
|
|
"value": "59.14.56.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-3078-4f03-bb7a-04a2950d210f",
|
|
|
|
|
"value": "59.17.178.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-3d6c-42e9-b75e-04a2950d210f",
|
|
|
|
|
"value": "59.2.84.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-f074-4ce5-8c69-04a2950d210f",
|
|
|
|
|
"value": "59.24.202.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-c828-4c5d-90cf-04a2950d210f",
|
|
|
|
|
"value": "59.29.168.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-87c4-476f-8b3f-04a2950d210f",
|
|
|
|
|
"value": "59.6.137.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-8710-4b40-9ef4-04a2950d210f",
|
|
|
|
|
"value": "59.9.117.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-0614-4e16-b4cf-04a2950d210f",
|
|
|
|
|
"value": "60.162.39.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-cc14-4bce-b8f7-04a2950d210f",
|
|
|
|
|
"value": "60.174.79.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-4558-4d45-be28-04a2950d210f",
|
|
|
|
|
"value": "60.174.95.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123143",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c7-6c30-4ec6-b947-04a2950d210f",
|
|
|
|
|
"value": "60.246.163.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-7330-4652-b78a-04a2950d210f",
|
|
|
|
|
"value": "60.248.158.50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-10ac-4fa9-9520-04a2950d210f",
|
|
|
|
|
"value": "60.248.176.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-fea0-4ca7-84e8-04a2950d210f",
|
|
|
|
|
"value": "60.248.232.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-5d9c-43c4-aaa9-04a2950d210f",
|
|
|
|
|
"value": "60.248.242.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-977c-4548-aaf7-04a2950d210f",
|
|
|
|
|
"value": "60.249.143.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-de40-4bc1-bd54-04a2950d210f",
|
|
|
|
|
"value": "60.249.177.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-079c-4938-85e3-04a2950d210f",
|
|
|
|
|
"value": "60.251.182.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-5a34-4314-8633-04a2950d210f",
|
|
|
|
|
"value": "60.251.216.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-7c98-4004-8c23-04a2950d210f",
|
|
|
|
|
"value": "61.102.164.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-13d4-42e4-8188-04a2950d210f",
|
|
|
|
|
"value": "61.190.97.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-efdc-4e48-9708-04a2950d210f",
|
|
|
|
|
"value": "61.216.57.176"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-7bd8-4f5d-938f-04a2950d210f",
|
|
|
|
|
"value": "61.223.147.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-4108-4481-a8b8-04a2950d210f",
|
|
|
|
|
"value": "61.223.166.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-b890-4ef1-bc58-04a2950d210f",
|
|
|
|
|
"value": "61.223.54.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-0250-4663-bdaa-04a2950d210f",
|
|
|
|
|
"value": "61.224.2.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-7efc-4a11-8bd4-04a2950d210f",
|
|
|
|
|
"value": "61.227.176.156"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-a594-432f-a391-04a2950d210f",
|
|
|
|
|
"value": "61.227.232.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-a2a0-4595-81a8-04a2950d210f",
|
|
|
|
|
"value": "61.227.99.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-b1a4-458e-8c91-04a2950d210f",
|
|
|
|
|
"value": "61.228.188.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-98f4-4ad7-bcd2-04a2950d210f",
|
|
|
|
|
"value": "61.228.191.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-3fac-4030-8c49-04a2950d210f",
|
|
|
|
|
"value": "61.230.1.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-dfe4-4a7b-a936-04a2950d210f",
|
|
|
|
|
"value": "61.230.115.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-c178-46c4-bbe0-04a2950d210f",
|
|
|
|
|
"value": "61.231.201.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-3f10-4e1f-b6fe-04a2950d210f",
|
|
|
|
|
"value": "61.231.32.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-2b48-4bb8-a0aa-04a2950d210f",
|
|
|
|
|
"value": "61.247.190.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-0934-423c-ab73-04a2950d210f",
|
|
|
|
|
"value": "61.57.220.220"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-3248-4150-8c4c-04a2950d210f",
|
|
|
|
|
"value": "61.63.119.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-7fe8-4170-8a2e-04a2950d210f",
|
|
|
|
|
"value": "61.73.8.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-a4b0-4975-95bd-04a2950d210f",
|
|
|
|
|
"value": "61.76.11.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-ce3c-4f08-8ec0-04a2950d210f",
|
|
|
|
|
"value": "61.80.66.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-abec-4480-ae1b-04a2950d210f",
|
|
|
|
|
"value": "61.84.247.221"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-081c-41f7-9030-04a2950d210f",
|
|
|
|
|
"value": "61.93.109.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-4cac-4038-8b7c-04a2950d210f",
|
|
|
|
|
"value": "64.110.92.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-719c-4734-aa9d-04a2950d210f",
|
|
|
|
|
"value": "68.202.89.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-f52c-47fe-9221-04a2950d210f",
|
|
|
|
|
"value": "69.118.243.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-2f54-4338-bfa5-04a2950d210f",
|
|
|
|
|
"value": "70.226.21.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-7dbc-413a-af4f-04a2950d210f",
|
|
|
|
|
"value": "71.125.3.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-17e4-4c28-b2c4-04a2950d210f",
|
|
|
|
|
"value": "74.78.82.1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-0518-4fe7-a543-04a2950d210f",
|
|
|
|
|
"value": "75.127.0.10"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123144",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c8-eb3c-4caf-8ca4-04a2950d210f",
|
|
|
|
|
"value": "75.190.122.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-b53c-490a-b1d7-04a2950d210f",
|
|
|
|
|
"value": "77.106.106.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-5b00-4875-8bee-04a2950d210f",
|
|
|
|
|
"value": "77.181.21.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-c9dc-40d7-a402-04a2950d210f",
|
|
|
|
|
"value": "77.234.20.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-e814-43e0-9bd0-04a2950d210f",
|
|
|
|
|
"value": "77.53.144.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-c29c-45a2-bd60-04a2950d210f",
|
|
|
|
|
"value": "77.79.133.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-82fc-4094-8d69-04a2950d210f",
|
|
|
|
|
"value": "77.85.62.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-b4a8-4914-afe0-04a2950d210f",
|
|
|
|
|
"value": "77.87.170.163"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-f8e8-4313-8020-04a2950d210f",
|
|
|
|
|
"value": "78.188.197.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-ac10-44d7-8a20-04a2950d210f",
|
|
|
|
|
"value": "78.73.236.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-bc60-4428-97e1-04a2950d210f",
|
|
|
|
|
"value": "78.82.179.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-9408-4795-bb40-04a2950d210f",
|
|
|
|
|
"value": "78.85.49.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-0f9c-445d-a764-04a2950d210f",
|
|
|
|
|
"value": "79.42.143.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-a214-4786-8606-04a2950d210f",
|
|
|
|
|
"value": "80.229.87.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-6ebc-433f-a8b9-04a2950d210f",
|
|
|
|
|
"value": "81.170.189.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-9688-446a-bc52-04a2950d210f",
|
|
|
|
|
"value": "81.198.9.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-d408-402a-b869-04a2950d210f",
|
|
|
|
|
"value": "81.22.132.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-6be8-40d1-a07d-04a2950d210f",
|
|
|
|
|
"value": "81.26.185.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-4f98-4441-9b5a-04a2950d210f",
|
|
|
|
|
"value": "82.197.255.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-9a34-477e-992f-04a2950d210f",
|
|
|
|
|
"value": "82.214.40.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-b8e8-4538-ae54-04a2950d210f",
|
|
|
|
|
"value": "82.79.103.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-7d48-4211-901e-04a2950d210f",
|
|
|
|
|
"value": "82.79.71.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-e788-409e-8415-04a2950d210f",
|
|
|
|
|
"value": "82.96.63.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-b144-4f0c-af14-04a2950d210f",
|
|
|
|
|
"value": "83.226.211.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-214c-458d-bc18-04a2950d210f",
|
|
|
|
|
"value": "83.233.13.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-7ce8-4f06-9ba3-04a2950d210f",
|
|
|
|
|
"value": "83.233.2.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-ea7c-4faa-9473-04a2950d210f",
|
|
|
|
|
"value": "84.210.234.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-31e4-48ea-8626-04a2950d210f",
|
|
|
|
|
"value": "84.219.204.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-16dc-48bd-a1c8-04a2950d210f",
|
|
|
|
|
"value": "84.254.1.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-d780-492c-b9e8-04a2950d210f",
|
|
|
|
|
"value": "84.94.209.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-a338-4662-952a-04a2950d210f",
|
|
|
|
|
"value": "85.224.71.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-a9d8-40ee-a0ba-04a2950d210f",
|
|
|
|
|
"value": "85.225.127.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-2574-455c-9b29-04a2950d210f",
|
|
|
|
|
"value": "85.225.156.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-a568-4d49-b539-04a2950d210f",
|
|
|
|
|
"value": "85.245.174.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-875c-4ca4-a93e-04a2950d210f",
|
|
|
|
|
"value": "86.124.192.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-77c4-428b-ba23-04a2950d210f",
|
|
|
|
|
"value": "86.126.106.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-5ea8-445a-bf56-04a2950d210f",
|
|
|
|
|
"value": "86.238.210.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-897c-4e60-8ff1-04a2950d210f",
|
|
|
|
|
"value": "87.1.111.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-12e8-4e31-93c0-04a2950d210f",
|
|
|
|
|
"value": "87.247.97.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-e954-46c9-84d0-04a2950d210f",
|
|
|
|
|
"value": "88.129.164.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-4f98-42e1-b42d-04a2950d210f",
|
|
|
|
|
"value": "88.190.193.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-e21c-4381-9c75-04a2950d210f",
|
|
|
|
|
"value": "88.201.193.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-2454-4454-97a3-04a2950d210f",
|
|
|
|
|
"value": "88.202.152.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123145",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993c9-a148-46d8-ad4f-04a2950d210f",
|
|
|
|
|
"value": "88.248.14.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-3e0c-48d3-8e63-04a2950d210f",
|
|
|
|
|
"value": "88.249.31.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-724c-448b-b171-04a2950d210f",
|
|
|
|
|
"value": "88.252.103.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-3638-4f3c-b2e6-04a2950d210f",
|
|
|
|
|
"value": "89.160.9.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-4e94-4d8f-a42e-04a2950d210f",
|
|
|
|
|
"value": "89.2.109.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-e164-4e28-bf8b-04a2950d210f",
|
|
|
|
|
"value": "89.208.122.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-e7a4-43d8-83c9-04a2950d210f",
|
|
|
|
|
"value": "89.208.30.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-f314-4a5d-892e-04a2950d210f",
|
|
|
|
|
"value": "89.208.30.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-4b2c-4841-9e38-04a2950d210f",
|
|
|
|
|
"value": "89.233.197.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-aa80-4243-8d32-04a2950d210f",
|
|
|
|
|
"value": "90.154.172.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-c160-465f-a66a-04a2950d210f",
|
|
|
|
|
"value": "90.154.209.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-c700-4e81-8069-04a2950d210f",
|
|
|
|
|
"value": "91.126.198.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-9e2c-4733-823c-04a2950d210f",
|
|
|
|
|
"value": "91.126.206.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-b208-45c3-81f7-04a2950d210f",
|
|
|
|
|
"value": "91.126.45.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-7a5c-4800-8667-04a2950d210f",
|
|
|
|
|
"value": "91.164.238.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-a864-4144-af1a-04a2950d210f",
|
|
|
|
|
"value": "91.202.132.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-30e8-4910-a491-04a2950d210f",
|
|
|
|
|
"value": "91.204.58.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-ac0c-4a96-a45c-04a2950d210f",
|
|
|
|
|
"value": "91.224.129.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-e670-4a9f-ab1d-04a2950d210f",
|
|
|
|
|
"value": "91.228.37.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-a9a4-4bc9-ba98-04a2950d210f",
|
|
|
|
|
"value": "91.246.215.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-cb10-4860-b757-04a2950d210f",
|
|
|
|
|
"value": "92.81.163.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-5658-45a2-811d-04a2950d210f",
|
|
|
|
|
"value": "93.159.184.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-d4c4-4581-8a28-04a2950d210f",
|
|
|
|
|
"value": "93.171.231.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-ffa8-4328-9f29-04a2950d210f",
|
|
|
|
|
"value": "93.41.206.144"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-8378-4539-8959-04a2950d210f",
|
|
|
|
|
"value": "93.79.100.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-3264-4644-a570-04a2950d210f",
|
|
|
|
|
"value": "94.154.18.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-236c-415d-bfb9-04a2950d210f",
|
|
|
|
|
"value": "94.30.52.33"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-a674-4e12-a061-04a2950d210f",
|
|
|
|
|
"value": "95.220.239.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-8688-4e11-82b9-04a2950d210f",
|
|
|
|
|
"value": "95.239.180.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-a99c-45df-b2e9-04a2950d210f",
|
|
|
|
|
"value": "95.28.58.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-740c-4860-b863-04a2950d210f",
|
|
|
|
|
"value": "95.62.145.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-8c20-4b93-82bc-04a2950d210f",
|
|
|
|
|
"value": "95.68.84.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-0ff0-4daa-9009-04a2950d210f",
|
|
|
|
|
"value": "95.86.38.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-3630-44a9-96db-04a2950d210f",
|
|
|
|
|
"value": "95.86.42.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123146",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993ca-7d58-4ad2-88e2-04a2950d210f",
|
|
|
|
|
"value": "98.128.130.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT botnet infected IoT nodes (IP addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-03-03T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-16T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1587123147",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5e9993cb-4c5c-498f-8236-04a2950d210f",
|
|
|
|
|
"value": "98.249.231.117"
|
|
|
|
|
}
|
2023-04-21 13:25:09 +00:00
|
|
|
]
|
2023-12-14 14:30:15 +00:00
|
|
|
}
|
2023-04-21 13:25:09 +00:00
|
|
|
}
|
