2023-04-21 13:25:09 +00:00
|
|
|
{
|
|
|
|
|
"Event": {
|
|
|
|
|
"analysis": "1",
|
|
|
|
|
"date": "2020-04-29",
|
|
|
|
|
"extends_uuid": "5e54ef58-004c-4acd-b0d6-967a950d210f",
|
|
|
|
|
"info": "Linux/Mirai-Fbot - New actor on propagation",
|
|
|
|
|
"publish_timestamp": "1590614085",
|
|
|
|
|
"published": true,
|
|
|
|
|
"threat_level_id": "3",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"uuid": "5ea98601-c03c-4025-a31b-4171950d210f",
|
|
|
|
|
"Orgc": {
|
|
|
|
|
"name": "MalwareMustDie",
|
|
|
|
|
"uuid": "569e04b2-efd0-45bd-b83a-4f7b950d210f"
|
|
|
|
|
},
|
|
|
|
|
"Tag": [
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ffffff",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "tlp:white",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#22681c",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "malware_classification:malware-category=\"Botnet\"",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#3b7500",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ff0000",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "Mirai",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Internal reference",
|
|
|
|
|
"comment": "The new actor threat analysis report",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168296",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5ea98668-54a8-4899-950d-3d22950d210f",
|
|
|
|
|
"value": "https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html#newactor"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-6070-4cc8-976d-c7dc950d210f",
|
|
|
|
|
"value": "1.165.147.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-afb4-4e92-825d-c7dc950d210f",
|
|
|
|
|
"value": "1.170.83.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-19e8-47a5-b46e-c7dc950d210f",
|
|
|
|
|
"value": "1.172.81.208"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-ff68-4534-b43b-c7dc950d210f",
|
|
|
|
|
"value": "1.173.162.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-8574-4fae-bf85-c7dc950d210f",
|
|
|
|
|
"value": "1.175.170.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-3bd4-48ec-a739-c7dc950d210f",
|
|
|
|
|
"value": "1.175.68.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-2e1c-4ce2-b99a-c7dc950d210f",
|
|
|
|
|
"value": "1.245.248.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-aff8-4af5-af39-c7dc950d210f",
|
|
|
|
|
"value": "1.36.216.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98707-27c8-4567-a462-c7dc950d210f",
|
|
|
|
|
"value": "1.36.228.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168455",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-7c0c-498d-82d3-c7dc950d210f",
|
|
|
|
|
"value": "1.64.227.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-f2b8-463c-8512-c7dc950d210f",
|
|
|
|
|
"value": "1.65.157.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-1950-4a05-9301-c7dc950d210f",
|
|
|
|
|
"value": "1.65.168.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-b130-41a7-ad07-c7dc950d210f",
|
|
|
|
|
"value": "103.219.208.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-394c-44b0-9332-c7dc950d210f",
|
|
|
|
|
"value": "104.10.132.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-f4cc-42f0-ae11-c7dc950d210f",
|
|
|
|
|
"value": "109.12.132.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-abb8-445a-ab8b-c7dc950d210f",
|
|
|
|
|
"value": "109.120.31.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-4530-4903-b967-c7dc950d210f",
|
|
|
|
|
"value": "109.75.203.65"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-ceb0-483d-8531-c7dc950d210f",
|
|
|
|
|
"value": "110.17.133.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-7e80-417c-a6f3-c7dc950d210f",
|
|
|
|
|
"value": "110.18.202.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-350c-47b7-974b-c7dc950d210f",
|
|
|
|
|
"value": "110.86.180.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-9f58-4411-b8ed-c7dc950d210f",
|
|
|
|
|
"value": "111.172.3.180"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-6d34-4182-8d31-c7dc950d210f",
|
|
|
|
|
"value": "111.222.186.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-8eb4-438f-b6ef-c7dc950d210f",
|
|
|
|
|
"value": "111.248.151.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-eb1c-4b73-b27e-c7dc950d210f",
|
|
|
|
|
"value": "111.250.132.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-cbb4-4bed-a126-c7dc950d210f",
|
|
|
|
|
"value": "111.251.217.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-5a08-4bbc-a7fd-c7dc950d210f",
|
|
|
|
|
"value": "111.253.6.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-99bc-47cd-8f0e-c7dc950d210f",
|
|
|
|
|
"value": "111.73.225.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-f120-45e8-9674-c7dc950d210f",
|
|
|
|
|
"value": "112.118.113.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-7754-4130-ab9f-c7dc950d210f",
|
|
|
|
|
"value": "112.118.221.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-d7b4-4636-a09f-c7dc950d210f",
|
|
|
|
|
"value": "112.118.224.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-1ac8-49c7-8dcd-c7dc950d210f",
|
|
|
|
|
"value": "112.119.119.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-9040-4164-afda-c7dc950d210f",
|
|
|
|
|
"value": "112.119.244.49"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-e780-414f-b3ee-c7dc950d210f",
|
|
|
|
|
"value": "112.119.62.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168456",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98708-4cd0-4f3e-b521-c7dc950d210f",
|
|
|
|
|
"value": "112.119.84.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-a268-442f-b693-c7dc950d210f",
|
|
|
|
|
"value": "112.184.237.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-caa4-4717-a531-c7dc950d210f",
|
|
|
|
|
"value": "112.250.212.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-1cbc-40ec-93ee-c7dc950d210f",
|
|
|
|
|
"value": "112.80.247.175"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-8574-4777-8885-c7dc950d210f",
|
|
|
|
|
"value": "113.116.128.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-2e9c-451a-abdf-c7dc950d210f",
|
|
|
|
|
"value": "113.254.225.175"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-f284-4eba-86ae-c7dc950d210f",
|
|
|
|
|
"value": "113.254.226.228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-8da0-49ec-ab54-c7dc950d210f",
|
|
|
|
|
"value": "113.255.161.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-4150-4f19-bade-c7dc950d210f",
|
|
|
|
|
"value": "113.255.229.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-d174-4006-90c2-c7dc950d210f",
|
|
|
|
|
"value": "113.255.251.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-10fc-4e59-bb98-c7dc950d210f",
|
|
|
|
|
"value": "113.91.248.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-b750-4cc6-a514-c7dc950d210f",
|
|
|
|
|
"value": "114.221.1.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-8e0c-4dfe-8949-c7dc950d210f",
|
|
|
|
|
"value": "114.223.140.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-5d9c-4759-8785-c7dc950d210f",
|
|
|
|
|
"value": "114.24.62.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-33cc-4351-a38b-c7dc950d210f",
|
|
|
|
|
"value": "114.26.84.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-50c4-408c-8b06-c7dc950d210f",
|
|
|
|
|
"value": "114.32.164.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-7fdc-4513-b4c3-c7dc950d210f",
|
|
|
|
|
"value": "114.36.23.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-af04-43c7-ad71-c7dc950d210f",
|
|
|
|
|
"value": "114.38.27.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-bf6c-46da-9a10-c7dc950d210f",
|
|
|
|
|
"value": "114.38.5.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-fdac-481f-980e-c7dc950d210f",
|
|
|
|
|
"value": "114.39.23.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-9ec0-40e7-8242-c7dc950d210f",
|
|
|
|
|
"value": "114.40.146.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-6cec-476d-ac69-c7dc950d210f",
|
|
|
|
|
"value": "114.40.174.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-8954-47f6-ae56-c7dc950d210f",
|
|
|
|
|
"value": "114.40.236.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-d304-4b85-9f05-c7dc950d210f",
|
|
|
|
|
"value": "114.44.123.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-b958-4bc3-ae40-c7dc950d210f",
|
|
|
|
|
"value": "114.44.63.209"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-2014-4cf9-9f83-c7dc950d210f",
|
|
|
|
|
"value": "115.50.65.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-af70-4558-a9d6-c7dc950d210f",
|
|
|
|
|
"value": "115.55.22.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-6c78-41f0-a4bd-c7dc950d210f",
|
|
|
|
|
"value": "116.113.99.172"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-ba18-42d4-b950-c7dc950d210f",
|
|
|
|
|
"value": "116.210.69.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-8b80-4986-922d-c7dc950d210f",
|
|
|
|
|
"value": "116.48.106.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-1d74-4b0b-8b7d-c7dc950d210f",
|
|
|
|
|
"value": "116.48.56.94"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-c70c-4c40-9ef9-c7dc950d210f",
|
|
|
|
|
"value": "116.48.60.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-2b1c-4d88-ad8f-c7dc950d210f",
|
|
|
|
|
"value": "116.49.129.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-2ea8-4212-9c32-c7dc950d210f",
|
|
|
|
|
"value": "116.49.180.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-a58c-4366-b605-c7dc950d210f",
|
|
|
|
|
"value": "116.77.73.247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-8e9c-4b08-b75d-c7dc950d210f",
|
|
|
|
|
"value": "117.190.236.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-316c-45d4-9639-c7dc950d210f",
|
|
|
|
|
"value": "117.85.138.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-cd58-4571-b717-c7dc950d210f",
|
|
|
|
|
"value": "118.141.128.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-8904-4162-ad4a-c7dc950d210f",
|
|
|
|
|
"value": "118.166.65.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-0a74-49aa-b4d1-c7dc950d210f",
|
|
|
|
|
"value": "118.32.217.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-9e7c-466d-8305-c7dc950d210f",
|
|
|
|
|
"value": "118.34.213.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-3f48-42fd-aeea-c7dc950d210f",
|
|
|
|
|
"value": "119.102.177.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-f448-4e55-a27a-c7dc950d210f",
|
|
|
|
|
"value": "119.236.248.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-2050-4a6d-8178-c7dc950d210f",
|
|
|
|
|
"value": "119.236.249.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-4a24-430d-b198-c7dc950d210f",
|
|
|
|
|
"value": "119.236.92.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-ac94-4cdf-8d7d-c7dc950d210f",
|
|
|
|
|
"value": "119.237.90.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-5968-4202-b629-c7dc950d210f",
|
|
|
|
|
"value": "119.99.247.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-5c50-4a83-924e-c7dc950d210f",
|
|
|
|
|
"value": "120.224.50.166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-3c50-44cf-b042-c7dc950d210f",
|
|
|
|
|
"value": "121.150.181.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-e8b8-4d53-b9d4-c7dc950d210f",
|
|
|
|
|
"value": "121.155.91.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-54b4-49e5-b133-c7dc950d210f",
|
|
|
|
|
"value": "121.179.78.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-e5d8-4065-b5fd-c7dc950d210f",
|
|
|
|
|
"value": "121.254.110.175"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168458",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870a-da00-4afe-b474-c7dc950d210f",
|
|
|
|
|
"value": "121.61.65.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-259c-4e9b-83de-c7dc950d210f",
|
|
|
|
|
"value": "122.100.154.51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-2418-422c-a973-c7dc950d210f",
|
|
|
|
|
"value": "122.121.19.138"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-73d4-432c-b2f6-c7dc950d210f",
|
|
|
|
|
"value": "122.142.177.109"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-567c-4b4d-b411-c7dc950d210f",
|
|
|
|
|
"value": "123.10.131.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-8e98-4208-bd34-c7dc950d210f",
|
|
|
|
|
"value": "123.201.22.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-dbe8-4771-8b2c-c7dc950d210f",
|
|
|
|
|
"value": "123.5.177.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-8b9c-4e4a-ba91-c7dc950d210f",
|
|
|
|
|
"value": "124.89.175.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-f18c-42a2-bf75-c7dc950d210f",
|
|
|
|
|
"value": "125.224.63.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-4160-4ffb-8d7b-c7dc950d210f",
|
|
|
|
|
"value": "125.40.185.55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-7158-4eda-a482-c7dc950d210f",
|
|
|
|
|
"value": "14.47.28.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-0704-4a52-a064-c7dc950d210f",
|
|
|
|
|
"value": "146.247.159.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-e814-470f-bdc1-c7dc950d210f",
|
|
|
|
|
"value": "149.34.7.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168459",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870b-60c8-4d76-b301-c7dc950d210f",
|
|
|
|
|
"value": "153.232.92.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-3208-49bd-9637-c7dc950d210f",
|
|
|
|
|
"value": "157.122.114.107"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-3d1c-4bed-a3a2-c7dc950d210f",
|
|
|
|
|
"value": "157.52.51.136"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-ae24-4b4a-8b1a-c7dc950d210f",
|
|
|
|
|
"value": "158.174.137.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-38b4-4fd2-aa46-c7dc950d210f",
|
|
|
|
|
"value": "158.174.167.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-8788-4d80-8884-c7dc950d210f",
|
|
|
|
|
"value": "168.70.92.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-18e8-43ad-9018-c7dc950d210f",
|
|
|
|
|
"value": "170.244.191.233"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-4100-4a2f-afcc-c7dc950d210f",
|
|
|
|
|
"value": "171.229.100.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-6e18-417e-a381-c7dc950d210f",
|
|
|
|
|
"value": "171.35.52.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-51c0-4c6e-9dba-c7dc950d210f",
|
|
|
|
|
"value": "171.38.145.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-776c-4db1-bd8b-c7dc950d210f",
|
|
|
|
|
"value": "171.38.194.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-9314-4749-a82a-c7dc950d210f",
|
|
|
|
|
"value": "171.38.194.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-1804-4cbe-bca3-c7dc950d210f",
|
|
|
|
|
"value": "171.38.217.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-dc08-477c-81dd-c7dc950d210f",
|
|
|
|
|
"value": "171.38.217.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-99f0-4e53-992f-c7dc950d210f",
|
|
|
|
|
"value": "171.38.223.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-a404-40f7-ac93-c7dc950d210f",
|
|
|
|
|
"value": "174.21.151.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-30f4-4195-b705-c7dc950d210f",
|
|
|
|
|
"value": "176.192.161.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-30e0-41df-ae20-c7dc950d210f",
|
|
|
|
|
"value": "176.74.211.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-cdb0-46b9-a391-c7dc950d210f",
|
|
|
|
|
"value": "177.10.149.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-6120-4ccf-aa40-c7dc950d210f",
|
|
|
|
|
"value": "177.10.150.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-7124-4df1-aa75-c7dc950d210f",
|
|
|
|
|
"value": "178.137.7.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-07b4-4d12-a664-c7dc950d210f",
|
|
|
|
|
"value": "178.141.196.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-d3c8-4df8-8e24-c7dc950d210f",
|
|
|
|
|
"value": "178.165.73.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-ce84-42a4-a567-c7dc950d210f",
|
|
|
|
|
"value": "178.45.202.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-9cfc-44b0-bdf1-c7dc950d210f",
|
|
|
|
|
"value": "179.219.205.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-5820-4a1d-93e3-c7dc950d210f",
|
|
|
|
|
"value": "180.137.147.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-0c3c-4bbf-8e11-c7dc950d210f",
|
|
|
|
|
"value": "180.94.158.248"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-ce4c-49ff-8d45-c7dc950d210f",
|
|
|
|
|
"value": "180.94.170.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-f7a0-452e-b30f-c7dc950d210f",
|
|
|
|
|
"value": "180.94.171.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-863c-4c32-8c3b-c7dc950d210f",
|
|
|
|
|
"value": "181.222.55.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-0960-4717-8d18-c7dc950d210f",
|
|
|
|
|
"value": "182.110.82.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-9ab8-40b2-8f4d-c7dc950d210f",
|
|
|
|
|
"value": "182.19.133.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-66cc-49d8-84b3-c7dc950d210f",
|
|
|
|
|
"value": "182.237.180.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-d654-49b1-9554-c7dc950d210f",
|
|
|
|
|
"value": "183.145.209.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-d900-4267-93cb-c7dc950d210f",
|
|
|
|
|
"value": "184.81.88.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-b4d4-45a3-8bed-c7dc950d210f",
|
|
|
|
|
"value": "186.195.154.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-a764-4b57-991e-c7dc950d210f",
|
|
|
|
|
"value": "187.102.57.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-1494-4c6a-aee4-c7dc950d210f",
|
|
|
|
|
"value": "188.148.191.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-598c-4c3d-8e00-c7dc950d210f",
|
|
|
|
|
"value": "188.151.72.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-ad88-4303-b355-c7dc950d210f",
|
|
|
|
|
"value": "188.191.14.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-4114-4db8-bcfd-c7dc950d210f",
|
|
|
|
|
"value": "188.243.243.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-a17c-491b-8e80-c7dc950d210f",
|
|
|
|
|
"value": "191.240.202.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-6888-4454-a11e-c7dc950d210f",
|
|
|
|
|
"value": "191.241.165.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-8934-4c76-9803-c7dc950d210f",
|
|
|
|
|
"value": "194.14.48.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-1da8-4d4e-b75a-c7dc950d210f",
|
|
|
|
|
"value": "196.3.193.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168460",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870c-f1a8-4271-967f-c7dc950d210f",
|
|
|
|
|
"value": "2.249.176.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-bd44-4871-82e4-c7dc950d210f",
|
|
|
|
|
"value": "202.30.9.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-1b54-4fbd-b474-c7dc950d210f",
|
|
|
|
|
"value": "203.218.158.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-1f88-450a-910c-c7dc950d210f",
|
|
|
|
|
"value": "203.218.245.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-bee8-4ac3-9ea1-c7dc950d210f",
|
|
|
|
|
"value": "205.238.27.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-22c4-4c42-9bd0-c7dc950d210f",
|
|
|
|
|
"value": "207.244.165.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-23e0-4905-a4c4-c7dc950d210f",
|
|
|
|
|
"value": "210.90.158.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-16bc-4ca7-ba8f-c7dc950d210f",
|
|
|
|
|
"value": "211.193.46.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-2cd4-45bd-bc89-c7dc950d210f",
|
|
|
|
|
"value": "212.154.92.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-2f48-4491-80c7-c7dc950d210f",
|
|
|
|
|
"value": "218.102.100.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-09f8-4ba3-80e1-c7dc950d210f",
|
|
|
|
|
"value": "218.102.109.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-8530-4e09-9a29-c7dc950d210f",
|
|
|
|
|
"value": "218.103.209.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-f584-458b-8aa8-c7dc950d210f",
|
|
|
|
|
"value": "218.164.51.152"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-b324-4654-bbc7-c7dc950d210f",
|
|
|
|
|
"value": "218.164.53.85"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-0d04-4884-84a4-c7dc950d210f",
|
|
|
|
|
"value": "218.173.234.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-a098-46db-bf55-c7dc950d210f",
|
|
|
|
|
"value": "218.191.170.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-ead4-4b35-817a-c7dc950d210f",
|
|
|
|
|
"value": "218.250.10.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-ac54-4541-88b3-c7dc950d210f",
|
|
|
|
|
"value": "218.250.135.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-59cc-4231-b1af-c7dc950d210f",
|
|
|
|
|
"value": "218.250.30.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-beb8-4575-9d8e-c7dc950d210f",
|
|
|
|
|
"value": "218.250.32.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-58e8-4042-8e5e-c7dc950d210f",
|
|
|
|
|
"value": "218.27.247.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-fe78-4ab5-befa-c7dc950d210f",
|
|
|
|
|
"value": "218.31.116.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-5bf8-4d0f-bbd6-c7dc950d210f",
|
|
|
|
|
"value": "218.32.44.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-8f44-4a4c-999b-c7dc950d210f",
|
|
|
|
|
"value": "219.240.104.244"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-4f9c-4c9f-8efe-c7dc950d210f",
|
|
|
|
|
"value": "219.73.5.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-a7d0-4966-8e36-c7dc950d210f",
|
|
|
|
|
"value": "219.73.75.229"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-0154-4679-b227-c7dc950d210f",
|
|
|
|
|
"value": "219.73.82.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-e388-4c3e-81e3-c7dc950d210f",
|
|
|
|
|
"value": "219.73.87.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-4564-423d-b02a-c7dc950d210f",
|
|
|
|
|
"value": "219.73.99.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-1cf8-4e6b-a6b6-c7dc950d210f",
|
|
|
|
|
"value": "219.77.160.89"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-09a4-4d70-982f-c7dc950d210f",
|
|
|
|
|
"value": "219.77.36.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-1e8c-4bb5-a9e0-c7dc950d210f",
|
|
|
|
|
"value": "219.77.70.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-40f4-4b2c-9b57-c7dc950d210f",
|
|
|
|
|
"value": "219.77.87.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-c250-42ca-ae3c-c7dc950d210f",
|
|
|
|
|
"value": "219.78.1.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-5efc-4dab-b621-c7dc950d210f",
|
|
|
|
|
"value": "219.78.145.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-c5e4-40a4-9d2d-c7dc950d210f",
|
|
|
|
|
"value": "219.79.129.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-3110-4343-8f04-c7dc950d210f",
|
|
|
|
|
"value": "219.79.167.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-355c-491a-b158-c7dc950d210f",
|
|
|
|
|
"value": "220.129.54.249"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-6938-43d3-ad0b-c7dc950d210f",
|
|
|
|
|
"value": "220.141.65.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-1924-496b-84c4-c7dc950d210f",
|
|
|
|
|
"value": "220.246.181.190"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-57c8-4a85-9af9-c7dc950d210f",
|
|
|
|
|
"value": "220.95.241.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-d8c0-4a25-ade7-c7dc950d210f",
|
|
|
|
|
"value": "221.124.121.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-2094-4c45-9f83-c7dc950d210f",
|
|
|
|
|
"value": "221.124.2.83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-11bc-4cc7-a733-c7dc950d210f",
|
|
|
|
|
"value": "221.124.215.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-3378-44f3-ae76-c7dc950d210f",
|
|
|
|
|
"value": "221.124.23.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-3eb0-44f3-94d0-c7dc950d210f",
|
|
|
|
|
"value": "221.124.26.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-7a70-4f25-9b78-c7dc950d210f",
|
|
|
|
|
"value": "221.124.27.140"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-6520-47c4-88f7-c7dc950d210f",
|
|
|
|
|
"value": "221.124.51.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168461",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870d-d028-4309-87cb-c7dc950d210f",
|
|
|
|
|
"value": "221.225.124.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-ca54-45d0-9673-c7dc950d210f",
|
|
|
|
|
"value": "221.225.191.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-e184-42ef-852d-c7dc950d210f",
|
|
|
|
|
"value": "221.235.143.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-d210-42b2-ac17-c7dc950d210f",
|
|
|
|
|
"value": "222.139.224.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-f34c-44a3-ad7a-c7dc950d210f",
|
|
|
|
|
"value": "222.141.44.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-e888-4df2-a591-c7dc950d210f",
|
|
|
|
|
"value": "222.236.153.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-8510-4b99-9a42-c7dc950d210f",
|
|
|
|
|
"value": "223.16.101.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-831c-4529-bf42-c7dc950d210f",
|
|
|
|
|
"value": "223.16.158.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-d828-4e77-9aa8-c7dc950d210f",
|
|
|
|
|
"value": "223.16.228.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-0b0c-41d4-8ddf-c7dc950d210f",
|
|
|
|
|
"value": "223.17.114.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-90e4-4541-b87b-c7dc950d210f",
|
|
|
|
|
"value": "223.17.116.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-1d94-4f41-bf45-c7dc950d210f",
|
|
|
|
|
"value": "223.17.159.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-dc68-4a6c-b43f-c7dc950d210f",
|
|
|
|
|
"value": "223.17.80.136"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-1000-49c0-9e6c-c7dc950d210f",
|
|
|
|
|
"value": "223.18.104.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-3744-4f5b-b90e-c7dc950d210f",
|
|
|
|
|
"value": "223.18.111.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-8408-4822-ac37-c7dc950d210f",
|
|
|
|
|
"value": "223.18.159.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-fa6c-49f2-9e83-c7dc950d210f",
|
|
|
|
|
"value": "223.18.228.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-0e3c-47e9-b8e6-c7dc950d210f",
|
|
|
|
|
"value": "24.137.101.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-8410-42a6-bd73-c7dc950d210f",
|
|
|
|
|
"value": "24.48.220.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-a3d0-45e0-b39b-c7dc950d210f",
|
|
|
|
|
"value": "27.109.186.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-bb1c-4bd5-9f1a-c7dc950d210f",
|
|
|
|
|
"value": "27.16.141.127"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-24dc-4653-a1b6-c7dc950d210f",
|
|
|
|
|
"value": "27.188.197.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-7d48-455b-bc8d-c7dc950d210f",
|
|
|
|
|
"value": "27.201.7.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-53a0-47a6-9e1d-c7dc950d210f",
|
|
|
|
|
"value": "27.29.8.104"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-bac8-4eeb-b426-c7dc950d210f",
|
|
|
|
|
"value": "27.73.218.238"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-a600-49fc-b9ae-c7dc950d210f",
|
|
|
|
|
"value": "27.96.233.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-5340-443e-9440-c7dc950d210f",
|
|
|
|
|
"value": "31.132.221.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-c130-4e71-87bf-c7dc950d210f",
|
|
|
|
|
"value": "31.208.63.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-cb7c-4205-9731-c7dc950d210f",
|
|
|
|
|
"value": "31.210.230.51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-532c-447d-b891-c7dc950d210f",
|
|
|
|
|
"value": "36.225.108.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-6548-410c-b171-c7dc950d210f",
|
|
|
|
|
"value": "36.226.189.116"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-90ec-4d9c-88a8-c7dc950d210f",
|
|
|
|
|
"value": "36.226.48.72"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-93f0-4a7c-a9e7-c7dc950d210f",
|
|
|
|
|
"value": "36.228.109.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-c7ec-41bf-a340-c7dc950d210f",
|
|
|
|
|
"value": "36.228.64.148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-f2c8-4221-ace8-c7dc950d210f",
|
|
|
|
|
"value": "36.229.83.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-4980-48f2-9f91-c7dc950d210f",
|
|
|
|
|
"value": "36.230.107.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-299c-4700-a58e-c7dc950d210f",
|
|
|
|
|
"value": "36.230.84.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-fd1c-47db-ada9-c7dc950d210f",
|
|
|
|
|
"value": "36.234.201.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-b4a0-4e0d-b35b-c7dc950d210f",
|
|
|
|
|
"value": "39.77.118.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-9484-4e8a-873d-c7dc950d210f",
|
|
|
|
|
"value": "39.89.146.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-f14c-4676-8fb5-c7dc950d210f",
|
|
|
|
|
"value": "42.102.166.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-7134-4774-a283-c7dc950d210f",
|
|
|
|
|
"value": "42.119.158.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-1b54-4cc2-976c-c7dc950d210f",
|
|
|
|
|
"value": "42.2.123.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-83f0-4da6-90f1-c7dc950d210f",
|
|
|
|
|
"value": "42.2.124.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-1fb8-42a3-8719-c7dc950d210f",
|
|
|
|
|
"value": "42.2.159.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-46f4-4e55-b9e4-c7dc950d210f",
|
|
|
|
|
"value": "42.2.3.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-857c-4487-8743-c7dc950d210f",
|
|
|
|
|
"value": "42.200.154.36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-2400-4cea-82d8-c7dc950d210f",
|
|
|
|
|
"value": "42.234.238.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-0184-4843-9c08-c7dc950d210f",
|
|
|
|
|
"value": "42.235.62.203"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-23ec-45ec-920b-c7dc950d210f",
|
|
|
|
|
"value": "42.98.140.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-e894-431a-b02b-c7dc950d210f",
|
|
|
|
|
"value": "42.98.51.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-b1f8-4e39-9c98-c7dc950d210f",
|
|
|
|
|
"value": "46.118.105.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168462",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870e-c304-41e0-b5e9-c7dc950d210f",
|
|
|
|
|
"value": "46.233.228.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168463",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea9870f-e95c-4480-b08f-c7dc950d210f",
|
|
|
|
|
"value": "46.59.17.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168464",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98710-0b28-4298-916b-c7dc950d210f",
|
|
|
|
|
"value": "46.72.148.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168464",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98710-42cc-4668-ab61-c7dc950d210f",
|
|
|
|
|
"value": "5.227.138.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168464",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98710-fa5c-402a-9c2f-c7dc950d210f",
|
|
|
|
|
"value": "5.227.139.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168464",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98710-7224-4614-8d50-c7dc950d210f",
|
|
|
|
|
"value": "58.153.207.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168464",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98710-c410-4499-806f-c7dc950d210f",
|
|
|
|
|
"value": "58.16.10.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168464",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98710-12ac-44eb-aa68-c7dc950d210f",
|
|
|
|
|
"value": "58.176.235.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-97f4-4982-9147-c7dc950d210f",
|
|
|
|
|
"value": "59.115.140.243"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-5a4c-4da6-9e2a-c7dc950d210f",
|
|
|
|
|
"value": "60.169.210.252"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-2198-4544-811e-c7dc950d210f",
|
|
|
|
|
"value": "60.174.90.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-d14c-4903-a44e-c7dc950d210f",
|
|
|
|
|
"value": "60.246.108.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-e9f8-494b-8edc-c7dc950d210f",
|
|
|
|
|
"value": "60.246.212.185"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-14dc-455d-a07f-c7dc950d210f",
|
|
|
|
|
"value": "60.246.221.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-a2c4-40e9-b4bd-c7dc950d210f",
|
|
|
|
|
"value": "61.223.234.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-4a50-410d-ad8e-c7dc950d210f",
|
|
|
|
|
"value": "61.224.129.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-6f58-4ddf-8306-c7dc950d210f",
|
|
|
|
|
"value": "61.224.78.124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-1cd8-4fca-a402-c7dc950d210f",
|
|
|
|
|
"value": "61.227.232.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-223c-4b79-a743-c7dc950d210f",
|
|
|
|
|
"value": "61.244.121.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-d14c-4314-b08c-c7dc950d210f",
|
|
|
|
|
"value": "68.183.87.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-dddc-4975-a310-c7dc950d210f",
|
|
|
|
|
"value": "68.187.55.167"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-3314-4d23-90b4-c7dc950d210f",
|
|
|
|
|
"value": "69.194.22.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-b76c-49a7-ac4a-c7dc950d210f",
|
|
|
|
|
"value": "71.215.108.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-7958-4c62-bc59-c7dc950d210f",
|
|
|
|
|
"value": "72.51.106.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-fdcc-4703-8efe-c7dc950d210f",
|
|
|
|
|
"value": "73.185.241.75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-8510-4757-b25e-c7dc950d210f",
|
|
|
|
|
"value": "74.82.238.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-6588-468f-abc7-c7dc950d210f",
|
|
|
|
|
"value": "77.106.106.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-b404-4f97-b973-c7dc950d210f",
|
|
|
|
|
"value": "77.70.80.234"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-78ac-4aa0-81a9-c7dc950d210f",
|
|
|
|
|
"value": "78.108.21.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-3994-4ea4-b362-c7dc950d210f",
|
|
|
|
|
"value": "78.84.115.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-ef5c-4f21-9d6c-c7dc950d210f",
|
|
|
|
|
"value": "78.84.67.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-a37c-4c2a-bb55-c7dc950d210f",
|
|
|
|
|
"value": "79.138.51.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-1290-4778-b1c8-c7dc950d210f",
|
|
|
|
|
"value": "81.224.99.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-953c-4c01-94de-c7dc950d210f",
|
|
|
|
|
"value": "81.225.53.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-9edc-44ca-b770-c7dc950d210f",
|
|
|
|
|
"value": "81.230.173.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-3118-4fd3-86ff-c7dc950d210f",
|
|
|
|
|
"value": "82.193.115.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168465",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98711-9be8-4c38-a819-c7dc950d210f",
|
|
|
|
|
"value": "83.226.108.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-f570-4a4c-a0c6-c7dc950d210f",
|
|
|
|
|
"value": "83.226.184.184"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-7bf4-4f46-a7ff-c7dc950d210f",
|
|
|
|
|
"value": "83.226.241.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-74ac-4893-b61b-c7dc950d210f",
|
|
|
|
|
"value": "84.210.146.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-0560-429d-bcf8-c7dc950d210f",
|
|
|
|
|
"value": "84.237.164.20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-eec0-452f-8e77-c7dc950d210f",
|
|
|
|
|
"value": "84.237.164.60"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-f110-4b1b-9abc-c7dc950d210f",
|
|
|
|
|
"value": "85.225.26.223"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-0dac-4bed-8163-c7dc950d210f",
|
|
|
|
|
"value": "85.225.27.72"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-680c-4a3c-9ccc-c7dc950d210f",
|
|
|
|
|
"value": "85.229.171.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-71c8-4fdb-8707-c7dc950d210f",
|
|
|
|
|
"value": "87.116.78.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-8fec-4183-8c76-c7dc950d210f",
|
|
|
|
|
"value": "90.224.44.84"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-b744-423e-9a24-c7dc950d210f",
|
|
|
|
|
"value": "91.126.237.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-685c-4457-94ab-c7dc950d210f",
|
|
|
|
|
"value": "91.153.26.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-3f44-4333-9794-c7dc950d210f",
|
|
|
|
|
"value": "91.200.183.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-2e64-40a2-82e3-c7dc950d210f",
|
|
|
|
|
"value": "91.205.154.102"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-e694-4395-b658-c7dc950d210f",
|
|
|
|
|
"value": "91.233.40.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-9a0c-4cc2-b254-c7dc950d210f",
|
|
|
|
|
"value": "93.103.140.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-7b7c-4a49-b45a-c7dc950d210f",
|
|
|
|
|
"value": "94.242.186.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-7c94-4f99-8b18-c7dc950d210f",
|
|
|
|
|
"value": "94.244.103.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588168466",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5ea98712-d2b8-43cb-a179-c7dc950d210f",
|
|
|
|
|
"value": "94.255.187.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "The FBOT C2",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-24T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-04-29T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1588170000",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-src",
|
|
|
|
|
"uuid": "5ea98cd7-27c4-45a6-a202-ce4f950d210f",
|
|
|
|
|
"value": "5.206.227.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-9a9c-4026-9b42-1299950d210f",
|
|
|
|
|
"value": "1.119.147.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-5508-4467-9959-1299950d210f",
|
|
|
|
|
"value": "1.161.125.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-fe00-4b68-a67e-1299950d210f",
|
|
|
|
|
"value": "1.162.123.63"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-bf58-43bd-aee4-1299950d210f",
|
|
|
|
|
"value": "1.162.144.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-b7bc-4499-9c82-1299950d210f",
|
|
|
|
|
"value": "1.168.207.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-7be4-45f2-a217-1299950d210f",
|
|
|
|
|
"value": "1.169.71.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-19b4-4781-a1f6-1299950d210f",
|
|
|
|
|
"value": "1.169.89.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-2adc-4c06-b33f-1299950d210f",
|
|
|
|
|
"value": "1.171.182.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-8bfc-4334-87b9-1299950d210f",
|
|
|
|
|
"value": "1.172.232.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-3e00-4d7c-b111-1299950d210f",
|
|
|
|
|
"value": "1.172.232.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-3f6c-4169-ac49-1299950d210f",
|
|
|
|
|
"value": "1.172.240.62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-6f1c-4b99-b63a-1299950d210f",
|
|
|
|
|
"value": "1.173.171.169"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-cd40-4262-bdcb-1299950d210f",
|
|
|
|
|
"value": "1.174.5.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-19fc-4d3d-af12-1299950d210f",
|
|
|
|
|
"value": "1.174.95.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-0e60-42ef-9b1e-1299950d210f",
|
|
|
|
|
"value": "1.175.170.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-e1b4-4a66-a671-1299950d210f",
|
|
|
|
|
"value": "1.175.173.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-371c-4776-9ef9-1299950d210f",
|
|
|
|
|
"value": "1.175.67.241"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-fe48-462d-a3d5-1299950d210f",
|
|
|
|
|
"value": "1.220.207.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-f598-47bd-b839-1299950d210f",
|
|
|
|
|
"value": "1.24.149.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-5b58-43bb-b7f1-1299950d210f",
|
|
|
|
|
"value": "1.36.196.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-5130-4c0c-bf7c-1299950d210f",
|
|
|
|
|
"value": "1.36.235.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced827-d220-42eb-be63-1299950d210f",
|
|
|
|
|
"value": "1.55.187.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614055",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-3dd4-4319-83ee-1299950d210f",
|
|
|
|
|
"value": "100.35.19.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-6be8-433c-af93-1299950d210f",
|
|
|
|
|
"value": "103.226.186.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-ee3c-40eb-b7ec-1299950d210f",
|
|
|
|
|
"value": "103.240.66.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-3360-4b74-b01c-1299950d210f",
|
|
|
|
|
"value": "103.90.189.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-0574-4436-bd30-1299950d210f",
|
|
|
|
|
"value": "104.162.26.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-82b4-40eb-a201-1299950d210f",
|
|
|
|
|
"value": "106.116.118.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-5ee0-43c5-b501-1299950d210f",
|
|
|
|
|
"value": "106.117.227.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-e844-4600-a4d7-1299950d210f",
|
|
|
|
|
"value": "106.37.196.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-7264-451a-a648-1299950d210f",
|
|
|
|
|
"value": "108.58.84.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-29e8-4da6-b9dc-1299950d210f",
|
|
|
|
|
"value": "109.160.30.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-8604-418f-85bb-1299950d210f",
|
|
|
|
|
"value": "109.225.118.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-309c-4cc0-b59c-1299950d210f",
|
|
|
|
|
"value": "110.18.203.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-1680-4450-9bf8-1299950d210f",
|
|
|
|
|
"value": "111.170.124.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-0c44-4d48-b1d2-1299950d210f",
|
|
|
|
|
"value": "111.170.124.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-0a74-4fd1-9e8c-1299950d210f",
|
|
|
|
|
"value": "111.170.125.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-8968-42ed-8339-1299950d210f",
|
|
|
|
|
"value": "111.170.84.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-7604-4fdd-990f-1299950d210f",
|
|
|
|
|
"value": "111.183.193.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-810c-46f3-95c3-1299950d210f",
|
|
|
|
|
"value": "111.225.53.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-3c28-4b2c-86d4-1299950d210f",
|
|
|
|
|
"value": "111.225.54.70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-7570-4999-ad83-1299950d210f",
|
|
|
|
|
"value": "111.241.118.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-0950-4bd1-b4d2-1299950d210f",
|
|
|
|
|
"value": "111.241.138.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-4a38-48c9-b097-1299950d210f",
|
|
|
|
|
"value": "111.248.196.251"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-4c7c-43c0-b229-1299950d210f",
|
|
|
|
|
"value": "111.250.21.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-a640-4d7f-aec5-1299950d210f",
|
|
|
|
|
"value": "111.250.224.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-c3b8-4ea1-a070-1299950d210f",
|
|
|
|
|
"value": "111.251.120.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-f6ec-4c70-a708-1299950d210f",
|
|
|
|
|
"value": "111.252.75.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-f01c-4211-a255-1299950d210f",
|
|
|
|
|
"value": "111.252.9.187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-cc24-4aa3-894e-1299950d210f",
|
|
|
|
|
"value": "111.253.182.18"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-bd84-495b-876b-1299950d210f",
|
|
|
|
|
"value": "111.253.29.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-43ec-4b52-ac84-1299950d210f",
|
|
|
|
|
"value": "111.253.63.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-9534-4fdb-b7eb-1299950d210f",
|
|
|
|
|
"value": "111.254.36.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-77c4-4113-b046-1299950d210f",
|
|
|
|
|
"value": "112.118.211.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-c458-4a32-b604-1299950d210f",
|
|
|
|
|
"value": "112.119.116.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-d400-4879-b3a1-1299950d210f",
|
|
|
|
|
"value": "112.119.186.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-055c-44ec-8980-1299950d210f",
|
|
|
|
|
"value": "112.119.236.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-8d14-4b99-9b39-1299950d210f",
|
|
|
|
|
"value": "112.194.133.13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-87a0-4ba2-9b60-1299950d210f",
|
|
|
|
|
"value": "112.197.108.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-29d8-48f1-8044-1299950d210f",
|
|
|
|
|
"value": "112.197.205.242"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-c228-41f2-9dd0-1299950d210f",
|
|
|
|
|
"value": "112.213.95.6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-26a8-42cf-bf4a-1299950d210f",
|
|
|
|
|
"value": "112.238.227.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-8708-42ed-a608-1299950d210f",
|
|
|
|
|
"value": "112.66.77.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614056",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced828-d114-4e99-b73f-1299950d210f",
|
|
|
|
|
"value": "113.104.219.93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-1834-4dc8-8df8-1299950d210f",
|
|
|
|
|
"value": "113.110.184.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-1564-4f46-b806-1299950d210f",
|
|
|
|
|
"value": "113.116.132.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-54a0-4d9e-9557-1299950d210f",
|
|
|
|
|
"value": "113.116.88.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-e0cc-44a8-911b-1299950d210f",
|
|
|
|
|
"value": "113.116.90.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-4bb0-44a1-8c23-1299950d210f",
|
|
|
|
|
"value": "113.14.133.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-719c-43ef-99c4-1299950d210f",
|
|
|
|
|
"value": "113.186.94.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-6f44-4033-b960-1299950d210f",
|
|
|
|
|
"value": "113.252.19.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-3ad0-4dc4-8d61-1299950d210f",
|
|
|
|
|
"value": "113.252.33.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-c15c-4d4d-a73e-1299950d210f",
|
|
|
|
|
"value": "113.254.236.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-6cfc-49bb-91af-1299950d210f",
|
|
|
|
|
"value": "113.255.229.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-632c-4e21-8b4a-1299950d210f",
|
|
|
|
|
"value": "113.255.235.192"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-ea2c-4e70-b23d-1299950d210f",
|
|
|
|
|
"value": "113.85.41.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-31a8-493c-b8de-1299950d210f",
|
|
|
|
|
"value": "113.85.41.38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-a4ac-44d3-9fae-1299950d210f",
|
|
|
|
|
"value": "113.88.25.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-9514-4c81-a8c1-1299950d210f",
|
|
|
|
|
"value": "113.88.26.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-7d9c-423c-acce-1299950d210f",
|
|
|
|
|
"value": "113.88.26.56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-d960-46b5-bbeb-1299950d210f",
|
|
|
|
|
"value": "113.91.248.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-b310-4a08-94ec-1299950d210f",
|
|
|
|
|
"value": "113.91.251.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-3868-47a7-a7c1-1299950d210f",
|
|
|
|
|
"value": "114.157.128.26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-9e94-4d3b-b190-1299950d210f",
|
|
|
|
|
"value": "114.233.196.10"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-bc60-4d23-bb05-1299950d210f",
|
|
|
|
|
"value": "114.24.110.68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-2cbc-4d65-ae3e-1299950d210f",
|
|
|
|
|
"value": "114.26.146.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-4c68-470e-9275-1299950d210f",
|
|
|
|
|
"value": "114.26.196.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-c8a8-4859-868e-1299950d210f",
|
|
|
|
|
"value": "114.26.76.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-0248-4341-9693-1299950d210f",
|
|
|
|
|
"value": "114.27.118.174"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-cc94-4f23-87cb-1299950d210f",
|
|
|
|
|
"value": "114.38.106.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-26c4-46c5-93cd-1299950d210f",
|
|
|
|
|
"value": "114.38.43.95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-0754-4507-b190-1299950d210f",
|
|
|
|
|
"value": "114.39.160.71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-e824-4e6b-b57e-1299950d210f",
|
|
|
|
|
"value": "114.39.177.10"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-eefc-4c47-9573-1299950d210f",
|
|
|
|
|
"value": "114.39.182.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-a430-4d69-9930-1299950d210f",
|
|
|
|
|
"value": "114.40.17.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-479c-4453-a974-1299950d210f",
|
|
|
|
|
"value": "114.40.182.112"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-9bf4-4fb0-ac64-1299950d210f",
|
|
|
|
|
"value": "114.40.241.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-3af8-4a27-9105-1299950d210f",
|
|
|
|
|
"value": "114.40.253.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-ea00-45a4-ae2c-1299950d210f",
|
|
|
|
|
"value": "114.40.96.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-37a8-4c5e-88b2-1299950d210f",
|
|
|
|
|
"value": "114.41.28.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-c878-4a68-b201-1299950d210f",
|
|
|
|
|
"value": "114.41.89.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-153c-4a70-8ce5-1299950d210f",
|
|
|
|
|
"value": "114.43.171.24"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-b104-4b2e-be15-1299950d210f",
|
|
|
|
|
"value": "114.45.72.27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-e9b4-49f5-b978-1299950d210f",
|
|
|
|
|
"value": "114.45.78.11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-92d8-47be-ab93-1299950d210f",
|
|
|
|
|
"value": "115.59.117.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-8e04-4afe-bedd-1299950d210f",
|
|
|
|
|
"value": "115.63.63.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-a728-48eb-bf96-1299950d210f",
|
|
|
|
|
"value": "116.10.132.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-e5c4-45b1-b9d6-1299950d210f",
|
|
|
|
|
"value": "116.49.115.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-4a54-4e1c-94be-1299950d210f",
|
|
|
|
|
"value": "116.77.73.253"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-1fe4-4ac2-85aa-1299950d210f",
|
|
|
|
|
"value": "116.86.191.100"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-fcd8-46e8-98c5-1299950d210f",
|
|
|
|
|
"value": "118.161.135.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-1fdc-4148-9ade-1299950d210f",
|
|
|
|
|
"value": "118.165.158.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-08d8-4deb-8e9f-1299950d210f",
|
|
|
|
|
"value": "118.166.153.160"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-1afc-4f58-b459-1299950d210f",
|
|
|
|
|
"value": "118.168.165.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614057",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced829-ccc0-4a07-aa28-1299950d210f",
|
|
|
|
|
"value": "118.168.76.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-e06c-4282-9657-1299950d210f",
|
|
|
|
|
"value": "118.169.39.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-32f4-4700-821a-1299950d210f",
|
|
|
|
|
"value": "118.169.42.170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-a7b8-421b-907a-1299950d210f",
|
|
|
|
|
"value": "119.136.88.217"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-3e7c-48bf-97c3-1299950d210f",
|
|
|
|
|
"value": "119.196.219.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-c848-425a-859f-1299950d210f",
|
|
|
|
|
"value": "119.237.193.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-6c84-43a0-ae1c-1299950d210f",
|
|
|
|
|
"value": "119.97.43.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-1c14-4776-afd2-1299950d210f",
|
|
|
|
|
"value": "119.99.254.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-e39c-450d-8a9b-1299950d210f",
|
|
|
|
|
"value": "120.43.35.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-adbc-46b5-83b7-1299950d210f",
|
|
|
|
|
"value": "121.132.132.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-ccf4-4ffa-b7b3-1299950d210f",
|
|
|
|
|
"value": "121.162.225.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-2ffc-4c49-ab26-1299950d210f",
|
|
|
|
|
"value": "121.61.67.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-f664-408e-9cf2-1299950d210f",
|
|
|
|
|
"value": "121.61.87.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-9c54-40cf-bcb4-1299950d210f",
|
|
|
|
|
"value": "122.100.194.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-3854-4e35-ac4e-1299950d210f",
|
|
|
|
|
"value": "122.121.156.151"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-3468-4bef-a5eb-1299950d210f",
|
|
|
|
|
"value": "122.142.177.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-9b50-4f84-b717-1299950d210f",
|
|
|
|
|
"value": "122.6.216.31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-2db8-4192-a41e-1299950d210f",
|
|
|
|
|
"value": "123.152.50.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-7cac-46cc-9004-1299950d210f",
|
|
|
|
|
"value": "123.175.118.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-8e1c-4529-9be2-1299950d210f",
|
|
|
|
|
"value": "123.175.118.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-5fe0-47e6-aa7f-1299950d210f",
|
|
|
|
|
"value": "123.183.3.205"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-89e0-44ab-9209-1299950d210f",
|
|
|
|
|
"value": "123.244.90.49"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-45d8-4681-9183-1299950d210f",
|
|
|
|
|
"value": "123.8.167.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-234c-4d9d-83df-1299950d210f",
|
|
|
|
|
"value": "124.89.174.111"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-1b70-45ed-a5c1-1299950d210f",
|
|
|
|
|
"value": "125.41.83.58"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-8810-483c-ac5b-1299950d210f",
|
|
|
|
|
"value": "125.44.229.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-2f88-4892-9cf2-1299950d210f",
|
|
|
|
|
"value": "130.204.185.78"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-42d0-4b67-b2c1-1299950d210f",
|
|
|
|
|
"value": "136.143.45.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-d618-448a-a970-1299950d210f",
|
|
|
|
|
"value": "137.186.107.194"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-e038-440d-ae58-1299950d210f",
|
|
|
|
|
"value": "14.199.238.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-a9c0-46e2-8938-1299950d210f",
|
|
|
|
|
"value": "149.34.4.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-bb78-4fe2-8497-1299950d210f",
|
|
|
|
|
"value": "150.116.233.246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-5ee4-4dc3-b525-1299950d210f",
|
|
|
|
|
"value": "156.200.102.25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-96f0-4480-83ca-1299950d210f",
|
|
|
|
|
"value": "159.224.112.227"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-28f0-4310-966a-1299950d210f",
|
|
|
|
|
"value": "161.81.38.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-72c4-4b76-b11d-1299950d210f",
|
|
|
|
|
"value": "162.229.179.69"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-4aec-4651-a863-1299950d210f",
|
|
|
|
|
"value": "168.70.107.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-92b0-44f4-ba73-1299950d210f",
|
|
|
|
|
"value": "170.244.190.45"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614058",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82a-01bc-4ca0-9e28-1299950d210f",
|
|
|
|
|
"value": "171.112.44.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-a79c-4f73-bee1-1299950d210f",
|
|
|
|
|
"value": "171.113.74.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-09fc-4ffc-9a08-1299950d210f",
|
|
|
|
|
"value": "171.214.223.146"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-85e8-4634-bcc6-1299950d210f",
|
|
|
|
|
"value": "171.217.71.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-4e5c-49d2-8d89-1299950d210f",
|
|
|
|
|
"value": "171.242.156.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-c994-410c-8b4d-1299950d210f",
|
|
|
|
|
"value": "171.38.145.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-41d0-4294-baa2-1299950d210f",
|
|
|
|
|
"value": "171.38.145.81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-a660-4dce-a134-1299950d210f",
|
|
|
|
|
"value": "171.38.147.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-7358-4f66-9644-1299950d210f",
|
|
|
|
|
"value": "171.38.148.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-2fb4-4631-836a-1299950d210f",
|
|
|
|
|
"value": "171.38.149.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-7894-4b98-9e74-1299950d210f",
|
|
|
|
|
"value": "171.38.149.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-0954-438f-bbf2-1299950d210f",
|
|
|
|
|
"value": "171.38.192.125"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-b2d4-4e12-90c9-1299950d210f",
|
|
|
|
|
"value": "171.38.192.191"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-6830-4bbf-a0af-1299950d210f",
|
|
|
|
|
"value": "171.38.192.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-41a0-46f6-b24d-1299950d210f",
|
|
|
|
|
"value": "171.38.192.252"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-ad70-4587-9a0d-1299950d210f",
|
|
|
|
|
"value": "171.38.193.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-de7c-48fc-85dc-1299950d210f",
|
|
|
|
|
"value": "171.38.193.153"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-f734-4b3e-a273-1299950d210f",
|
|
|
|
|
"value": "171.38.193.97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-a9ec-4ace-82e1-1299950d210f",
|
|
|
|
|
"value": "171.38.194.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-8988-4c9f-99b5-1299950d210f",
|
|
|
|
|
"value": "171.38.194.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-d278-4ce5-b7b5-1299950d210f",
|
|
|
|
|
"value": "171.38.195.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-4a6c-4240-a60f-1299950d210f",
|
|
|
|
|
"value": "171.38.195.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-2c10-44ea-b440-1299950d210f",
|
|
|
|
|
"value": "171.38.195.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-15b0-449f-bdc3-1299950d210f",
|
|
|
|
|
"value": "171.38.195.53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-467c-4041-8682-1299950d210f",
|
|
|
|
|
"value": "171.38.195.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-6c58-49e1-81ba-1299950d210f",
|
|
|
|
|
"value": "171.38.216.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-b414-4c38-a4c3-1299950d210f",
|
|
|
|
|
"value": "171.38.219.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-e85c-4551-b0e3-1299950d210f",
|
|
|
|
|
"value": "171.38.222.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-519c-46df-bb0e-1299950d210f",
|
|
|
|
|
"value": "176.103.200.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-c290-4d89-ace4-1299950d210f",
|
|
|
|
|
"value": "176.113.35.7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-6bbc-4c29-8535-1299950d210f",
|
|
|
|
|
"value": "178.136.100.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-4e4c-4d5d-afac-1299950d210f",
|
|
|
|
|
"value": "182.113.208.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-f7f4-4b21-810e-1299950d210f",
|
|
|
|
|
"value": "182.119.3.224"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-cdfc-48e8-ac19-1299950d210f",
|
|
|
|
|
"value": "182.189.206.164"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-9a5c-4625-b8bd-1299950d210f",
|
|
|
|
|
"value": "182.189.253.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-fb58-4e66-bab3-1299950d210f",
|
|
|
|
|
"value": "183.101.174.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-55f0-422d-87d2-1299950d210f",
|
|
|
|
|
"value": "183.108.165.57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-3238-4198-ac5e-1299950d210f",
|
|
|
|
|
"value": "183.15.90.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-785c-48d1-8105-1299950d210f",
|
|
|
|
|
"value": "183.15.91.211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-4d40-4fba-b523-1299950d210f",
|
|
|
|
|
"value": "183.15.91.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-9cb8-4953-8269-1299950d210f",
|
|
|
|
|
"value": "185.165.125.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-fba4-437d-b908-1299950d210f",
|
|
|
|
|
"value": "185.71.117.107"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-2c80-4bcd-a6ac-1299950d210f",
|
|
|
|
|
"value": "188.194.184.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-b2e8-4175-91f6-1299950d210f",
|
|
|
|
|
"value": "188.223.140.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-d080-43ef-9d63-1299950d210f",
|
|
|
|
|
"value": "188.243.37.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-4670-4364-aa5d-1299950d210f",
|
|
|
|
|
"value": "188.68.10.181"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-b3c8-4c95-b976-1299950d210f",
|
|
|
|
|
"value": "190.215.159.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-f584-4350-90e3-1299950d210f",
|
|
|
|
|
"value": "191.240.202.216"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82b-ea70-4908-a49e-1299950d210f",
|
|
|
|
|
"value": "2.36.67.225"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614059",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-86c4-4217-9e4f-1299950d210f",
|
|
|
|
|
"value": "210.179.39.240"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-1d48-4659-8469-1299950d210f",
|
|
|
|
|
"value": "210.209.255.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-7cf4-4a9e-8cfa-1299950d210f",
|
|
|
|
|
"value": "211.67.66.214"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-8820-4cb8-802d-1299950d210f",
|
|
|
|
|
"value": "212.71.13.34"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-e220-4274-a89b-1299950d210f",
|
|
|
|
|
"value": "218.102.197.10"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-4d8c-4d79-977c-1299950d210f",
|
|
|
|
|
"value": "218.103.172.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-eaa8-42ff-920a-1299950d210f",
|
|
|
|
|
"value": "218.164.120.118"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-d2b0-4ee6-b143-1299950d210f",
|
|
|
|
|
"value": "218.164.19.143"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-f0d4-4eb4-96da-1299950d210f",
|
|
|
|
|
"value": "218.164.53.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-c9f0-426e-924f-1299950d210f",
|
|
|
|
|
"value": "218.164.63.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-ef78-4d17-b27e-1299950d210f",
|
|
|
|
|
"value": "218.166.46.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-edd4-467e-8461-1299950d210f",
|
|
|
|
|
"value": "218.191.239.218"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-0b88-4f61-b6c8-1299950d210f",
|
|
|
|
|
"value": "218.250.122.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-8c44-4dfb-b178-1299950d210f",
|
|
|
|
|
"value": "218.250.250.77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-157c-4dc5-9f0d-1299950d210f",
|
|
|
|
|
"value": "218.73.52.150"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-2748-44fe-8d79-1299950d210f",
|
|
|
|
|
"value": "219.78.254.188"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-c1f0-46ba-beea-1299950d210f",
|
|
|
|
|
"value": "219.79.76.176"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-e2dc-437e-9a59-1299950d210f",
|
|
|
|
|
"value": "219.91.133.237"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-71a8-4fe4-9eb3-1299950d210f",
|
|
|
|
|
"value": "220.137.0.205"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-d81c-4917-a8ed-1299950d210f",
|
|
|
|
|
"value": "220.137.4.67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-aef8-4ff9-b0ef-1299950d210f",
|
|
|
|
|
"value": "220.143.0.202"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-fc10-41b0-98e6-1299950d210f",
|
|
|
|
|
"value": "220.143.13.199"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-96ec-4ab1-8ac7-1299950d210f",
|
|
|
|
|
"value": "220.185.198.4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-3180-4bc1-969e-1299950d210f",
|
|
|
|
|
"value": "220.185.222.215"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-1cf8-48aa-91f6-1299950d210f",
|
|
|
|
|
"value": "221.124.207.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-cd24-4dc4-aebb-1299950d210f",
|
|
|
|
|
"value": "221.124.75.99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-d144-45a5-a679-1299950d210f",
|
|
|
|
|
"value": "221.157.208.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-2088-495f-b716-1299950d210f",
|
|
|
|
|
"value": "222.139.222.254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-d23c-44b3-bcf3-1299950d210f",
|
|
|
|
|
"value": "223.16.208.49"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-dbe0-4878-bfd7-1299950d210f",
|
|
|
|
|
"value": "223.16.244.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-c7d8-4963-8fda-1299950d210f",
|
|
|
|
|
"value": "223.17.65.130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-c018-426d-bc12-1299950d210f",
|
|
|
|
|
"value": "223.18.146.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-50d8-4806-bead-1299950d210f",
|
|
|
|
|
"value": "223.18.149.226"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-4374-4360-866f-1299950d210f",
|
|
|
|
|
"value": "223.18.222.177"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-94fc-454e-8230-1299950d210f",
|
|
|
|
|
"value": "223.19.46.48"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614060",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82c-94a4-41c6-bc74-1299950d210f",
|
|
|
|
|
"value": "223.27.111.76"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-7e98-4a04-89f1-1299950d210f",
|
|
|
|
|
"value": "24.225.157.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-eb20-4a23-94f6-1299950d210f",
|
|
|
|
|
"value": "27.109.209.96"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-9b18-43b2-9b22-1299950d210f",
|
|
|
|
|
"value": "27.109.230.91"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-7e9c-4d9f-86a5-1299950d210f",
|
|
|
|
|
"value": "27.188.40.196"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-6318-4edc-80a2-1299950d210f",
|
|
|
|
|
"value": "27.188.45.207"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-7c88-46e7-aa00-1299950d210f",
|
|
|
|
|
"value": "27.211.45.41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-6f20-4830-ba3f-1299950d210f",
|
|
|
|
|
"value": "27.24.36.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614061",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82d-da44-4c06-9547-1299950d210f",
|
|
|
|
|
"value": "27.4.23.135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-1a04-45ee-b599-1299950d210f",
|
|
|
|
|
"value": "27.70.16.212"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-d36c-48fe-b253-1299950d210f",
|
|
|
|
|
"value": "27.76.204.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-b684-40cb-a4e8-1299950d210f",
|
|
|
|
|
"value": "31.163.140.22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-fba0-492d-b357-1299950d210f",
|
|
|
|
|
"value": "31.208.243.189"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-a900-46ca-bbac-1299950d210f",
|
|
|
|
|
"value": "31.28.199.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-f438-4093-b82e-1299950d210f",
|
|
|
|
|
"value": "36.226.44.88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-78e4-4796-a339-1299950d210f",
|
|
|
|
|
"value": "36.228.213.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-e6fc-4fa4-9564-1299950d210f",
|
|
|
|
|
"value": "36.228.80.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-8bdc-4791-b16e-1299950d210f",
|
|
|
|
|
"value": "36.229.164.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-665c-4bfa-891f-1299950d210f",
|
|
|
|
|
"value": "36.230.86.123"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-d3b4-4c48-b08e-1299950d210f",
|
|
|
|
|
"value": "36.231.216.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-3438-4689-9e08-1299950d210f",
|
|
|
|
|
"value": "36.232.168.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-a2c4-43cd-a4a6-1299950d210f",
|
|
|
|
|
"value": "36.233.107.47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-0044-4d84-bff1-1299950d210f",
|
|
|
|
|
"value": "36.233.109.186"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-41ac-4116-881f-1299950d210f",
|
|
|
|
|
"value": "36.234.250.249"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-aaa4-4d22-af01-1299950d210f",
|
|
|
|
|
"value": "36.234.71.198"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-51e4-4954-a807-1299950d210f",
|
|
|
|
|
"value": "36.235.115.128"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-a350-45d3-9438-1299950d210f",
|
|
|
|
|
"value": "36.236.123.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-eef4-4378-9308-1299950d210f",
|
|
|
|
|
"value": "36.236.89.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-4cac-42c6-8059-1299950d210f",
|
|
|
|
|
"value": "36.237.193.129"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-68cc-4192-8677-1299950d210f",
|
|
|
|
|
"value": "36.239.119.139"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-a5b4-4467-b2da-1299950d210f",
|
|
|
|
|
"value": "36.239.48.155"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-e1b8-4700-9070-1299950d210f",
|
|
|
|
|
"value": "36.239.72.171"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-118c-4936-b672-1299950d210f",
|
|
|
|
|
"value": "36.239.78.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-d86c-48ae-a518-1299950d210f",
|
|
|
|
|
"value": "36.35.76.158"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-22b4-4d69-890a-1299950d210f",
|
|
|
|
|
"value": "37.112.41.235"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-2e08-4809-933b-1299950d210f",
|
|
|
|
|
"value": "37.157.115.119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-dab8-437d-bd01-1299950d210f",
|
|
|
|
|
"value": "37.203.19.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-0110-4c8b-ae13-1299950d210f",
|
|
|
|
|
"value": "42.113.113.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-79e0-4fe6-827e-1299950d210f",
|
|
|
|
|
"value": "42.2.130.92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-30d4-4a12-a62d-1299950d210f",
|
|
|
|
|
"value": "42.2.182.39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-ea18-4324-8699-1299950d210f",
|
|
|
|
|
"value": "42.2.221.66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-e348-4020-9306-1299950d210f",
|
|
|
|
|
"value": "42.2.233.137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-86c8-466a-ba60-1299950d210f",
|
|
|
|
|
"value": "42.2.254.236"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-2e5c-40a0-bd9b-1299950d210f",
|
|
|
|
|
"value": "42.225.233.115"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-8cf8-4ebe-9ee7-1299950d210f",
|
|
|
|
|
"value": "42.225.42.29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-c7a4-4963-8b77-1299950d210f",
|
|
|
|
|
"value": "42.231.64.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-aabc-4a6b-8699-1299950d210f",
|
|
|
|
|
"value": "42.233.136.162"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-6448-449f-bb64-1299950d210f",
|
|
|
|
|
"value": "42.3.114.197"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-c5c0-4780-a680-1299950d210f",
|
|
|
|
|
"value": "42.98.108.154"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-407c-4b74-af55-1299950d210f",
|
|
|
|
|
"value": "42.98.214.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-d300-4a5f-be6e-1299950d210f",
|
|
|
|
|
"value": "45.125.44.59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-091c-4d06-9597-1299950d210f",
|
|
|
|
|
"value": "49.159.7.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-2270-4813-a04b-1299950d210f",
|
|
|
|
|
"value": "50.195.129.121"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-7380-4fe8-9627-1299950d210f",
|
|
|
|
|
"value": "58.152.235.21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-f3c0-4585-b71d-1299950d210f",
|
|
|
|
|
"value": "58.152.248.231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-00d0-4589-a29a-1299950d210f",
|
|
|
|
|
"value": "58.153.26.30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614062",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82e-0104-4c7b-a68f-1299950d210f",
|
|
|
|
|
"value": "58.224.13.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-0cc8-4b63-8825-1299950d210f",
|
|
|
|
|
"value": "58.245.89.205"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-c0ac-4312-9dfa-1299950d210f",
|
|
|
|
|
"value": "58.247.38.54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-af4c-4bb5-9ebe-1299950d210f",
|
|
|
|
|
"value": "58.58.7.106"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-e280-4881-ae57-1299950d210f",
|
|
|
|
|
"value": "59.173.194.165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-90d0-480a-a5ca-1299950d210f",
|
|
|
|
|
"value": "59.30.123.182"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-67cc-4bad-b70b-1299950d210f",
|
|
|
|
|
"value": "60.176.246.141"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-dde8-489c-994a-1299950d210f",
|
|
|
|
|
"value": "60.176.247.145"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-5220-4b60-9376-1299950d210f",
|
|
|
|
|
"value": "60.246.184.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-10f0-4d31-b9e9-1299950d210f",
|
|
|
|
|
"value": "60.246.199.101"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-a274-4632-b1da-1299950d210f",
|
|
|
|
|
"value": "60.246.211.114"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-c160-4133-9888-1299950d210f",
|
|
|
|
|
"value": "60.246.220.103"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-d048-4320-9210-1299950d210f",
|
|
|
|
|
"value": "60.246.236.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-0218-4830-9476-1299950d210f",
|
|
|
|
|
"value": "60.246.237.19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-3cc8-4f84-bb96-1299950d210f",
|
|
|
|
|
"value": "60.246.66.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-55e0-4d44-8ee7-1299950d210f",
|
|
|
|
|
"value": "61.223.116.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-8494-4eaf-af77-1299950d210f",
|
|
|
|
|
"value": "61.224.131.205"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-b6ac-4cbd-bd68-1299950d210f",
|
|
|
|
|
"value": "61.227.118.178"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-7b00-49cb-8ecd-1299950d210f",
|
|
|
|
|
"value": "61.230.96.73"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-3c34-4892-9b7d-1299950d210f",
|
|
|
|
|
"value": "61.53.200.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-46cc-4d4b-9e69-1299950d210f",
|
|
|
|
|
"value": "61.53.40.90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-ade0-4740-9c36-1299950d210f",
|
|
|
|
|
"value": "61.93.157.82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-7874-46b6-8cf3-1299950d210f",
|
|
|
|
|
"value": "65.99.166.28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-3e60-4fd5-8933-1299950d210f",
|
|
|
|
|
"value": "67.167.111.14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-0e54-4fc7-a9e8-1299950d210f",
|
|
|
|
|
"value": "71.215.203.200"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-a128-41bd-86aa-1299950d210f",
|
|
|
|
|
"value": "77.109.50.43"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-11dc-4e33-8c98-1299950d210f",
|
|
|
|
|
"value": "77.172.202.113"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-1f74-44b5-8198-1299950d210f",
|
|
|
|
|
"value": "80.203.72.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-5954-4af7-a27a-1299950d210f",
|
|
|
|
|
"value": "81.225.152.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-3ff0-48ce-89eb-1299950d210f",
|
|
|
|
|
"value": "81.227.25.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-3f9c-490d-9e0c-1299950d210f",
|
|
|
|
|
"value": "83.15.64.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-e998-4bdc-899c-1299950d210f",
|
|
|
|
|
"value": "83.17.170.105"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-bc18-4e3b-b0ac-1299950d210f",
|
|
|
|
|
"value": "83.234.54.120"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-63e0-42cb-9e05-1299950d210f",
|
|
|
|
|
"value": "83.252.167.16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-6284-4e5d-9d2e-1299950d210f",
|
|
|
|
|
"value": "83.255.14.179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-7a70-406d-9689-1299950d210f",
|
|
|
|
|
"value": "83.68.225.108"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-924c-46f7-8ab7-1299950d210f",
|
|
|
|
|
"value": "85.224.196.195"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-6178-4084-800c-1299950d210f",
|
|
|
|
|
"value": "85.24.210.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-7130-428e-9e1d-1299950d210f",
|
|
|
|
|
"value": "86.206.210.193"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-9600-4021-b32a-1299950d210f",
|
|
|
|
|
"value": "87.120.210.122"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-1e08-4dfd-b39b-1299950d210f",
|
|
|
|
|
"value": "87.253.87.3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-90fc-4bec-88d2-1299950d210f",
|
|
|
|
|
"value": "87.97.233.206"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-4ddc-46b5-9090-1299950d210f",
|
|
|
|
|
"value": "88.252.205.250"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-7c8c-4cd9-97be-1299950d210f",
|
|
|
|
|
"value": "89.254.231.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-923c-4cf4-a2bb-1299950d210f",
|
|
|
|
|
"value": "89.35.140.5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614063",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced82f-63d0-43d7-b0ed-1299950d210f",
|
|
|
|
|
"value": "90.85.7.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-e70c-4b07-bceb-1299950d210f",
|
|
|
|
|
"value": "91.126.189.210"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-8380-488f-a956-1299950d210f",
|
|
|
|
|
"value": "91.126.47.110"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-1374-4978-8141-1299950d210f",
|
|
|
|
|
"value": "91.212.173.37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-58a8-49a6-a46b-1299950d210f",
|
|
|
|
|
"value": "91.214.232.52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-7a84-4301-a7ce-1299950d210f",
|
|
|
|
|
"value": "93.171.172.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-a934-43cc-b52d-1299950d210f",
|
|
|
|
|
"value": "93.77.35.159"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-a87c-4943-8971-1299950d210f",
|
|
|
|
|
"value": "94.242.190.161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-b69c-45a2-bd15-1299950d210f",
|
|
|
|
|
"value": "94.245.21.142"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-92a0-434b-99b7-1299950d210f",
|
|
|
|
|
"value": "94.253.57.147"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-393c-4b6e-ad03-1299950d210f",
|
|
|
|
|
"value": "94.34.36.86"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-03ac-4eb6-bd5b-1299950d210f",
|
|
|
|
|
"value": "94.74.109.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-1888-422b-81a2-1299950d210f",
|
|
|
|
|
"value": "95.183.119.46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-e438-4b8f-9b86-1299950d210f",
|
|
|
|
|
"value": "95.43.39.17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-a77c-4b4a-92c0-1299950d210f",
|
|
|
|
|
"value": "95.47.148.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-c754-47c3-8453-1299950d210f",
|
|
|
|
|
"value": "95.51.0.173"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "New actor's Mirai FBOT botnet infected IoT nodes (IPv4 addresses)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"first_seen": "2020-04-30T00:00:00+00:00",
|
|
|
|
|
"last_seen": "2020-05-28T00:00:00+00:00",
|
|
|
|
|
"timestamp": "1590614064",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5eced830-2f78-43cb-9cb3-1299950d210f",
|
|
|
|
|
"value": "98.128.130.63"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
