{ "type": "bundle", "id": "bundle--57b586d3-6c68-4343-9d27-46f3950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:01.000Z", "modified": "2016-08-18T10:04:01.000Z", "name": "CthulhuSPRL.be", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--57b586d3-6c68-4343-9d27-46f3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:01.000Z", "modified": "2016-08-18T10:04:01.000Z", "name": "OSINT SSH bruteforce logs from burberry user on AlienVault OTX", "published": "2016-08-18T10:04:21Z", "object_refs": [ "observed-data--57b586ee-7d90-41e0-8c44-4de2950d210f", "url--57b586ee-7d90-41e0-8c44-4de2950d210f", "indicator--57b587dc-a958-4371-8157-4064950d210f", "indicator--57b587dc-e838-4f71-9183-4d23950d210f", "indicator--57b587dc-9e88-4bad-bb6b-4ba0950d210f", "indicator--57b587dc-e100-43ec-9182-4acb950d210f", "indicator--57b587dd-be90-48ee-a455-435c950d210f", "indicator--57b587dd-a60c-4022-87ac-48e6950d210f", "indicator--57b587dd-6ac4-4cf1-ba20-4169950d210f", "indicator--57b587dd-2878-4c5f-a327-413e950d210f", "indicator--57b587dd-0fc4-4f80-b761-4bdb950d210f", "indicator--57b587de-e524-4e21-b5a4-429d950d210f", "indicator--57b587de-272c-4ad6-817d-413d950d210f", "indicator--57b587de-6134-4884-bf7b-4285950d210f", "indicator--57b587de-cc00-403e-b47d-472a950d210f", "indicator--57b587de-20ec-4d1b-a164-43f3950d210f", "indicator--57b587df-cc8c-49c7-b9af-465c950d210f", "indicator--57b587df-43f4-4813-8f88-4c10950d210f", "indicator--57b587df-2fdc-4885-9c90-4556950d210f", "indicator--57b587df-31bc-4605-8a84-4a96950d210f", "indicator--57b587df-7bdc-4309-b517-41e4950d210f", "indicator--57b587df-9718-4d29-a9c1-4f29950d210f", "indicator--57b587e0-858c-408b-949f-451b950d210f", "indicator--57b587e0-71f0-4b2c-a555-4b3b950d210f", "indicator--57b587e0-a064-436b-9756-4f5b950d210f", "indicator--57b587e0-a820-47a6-a9b1-4a7f950d210f", "indicator--57b587e0-0824-4ca3-911a-4236950d210f", "indicator--57b587e1-ad20-4c09-b159-458b950d210f", "indicator--57b587e1-c04c-4fda-a64d-474a950d210f", "indicator--57b587e1-0198-48c7-96ac-4a17950d210f", "indicator--57b587e1-1080-4a65-baa3-4bb1950d210f", "indicator--57b587e1-0d88-483a-99b7-4c99950d210f", "indicator--57b587e1-a780-4b24-a614-4215950d210f", "indicator--57b587e2-76a0-4e55-8a3f-4191950d210f", "indicator--57b587e2-2ba0-407b-81a0-4e56950d210f", "indicator--57b587e2-d780-49b4-ab1f-49dc950d210f", "indicator--57b587e2-5634-46e3-8a8e-4300950d210f", "indicator--57b587e2-e7d4-4216-a172-4b2a950d210f", "indicator--57b587e3-ba68-4e39-ab40-4fd2950d210f", "indicator--57b587e3-a388-4b83-bdae-48f5950d210f", "indicator--57b587e3-8aac-46d8-88f5-4b72950d210f", "indicator--57b587e3-c778-407b-bdbb-4477950d210f", "indicator--57b587e3-c114-4401-aabd-47bd950d210f", "indicator--57b587e3-1b7c-4a27-862b-46e2950d210f", "indicator--57b587e4-a894-4f49-8103-44fb950d210f", "indicator--57b587e4-1818-4576-a5a4-46a3950d210f", "indicator--57b587e4-fe3c-4d7e-9bc2-44a7950d210f", "indicator--57b587e4-1f10-45d7-ae17-4ffb950d210f", "indicator--57b587e4-ded8-4857-8564-4767950d210f", "indicator--57b587e5-efd8-4161-9ae6-4101950d210f", "indicator--57b587e5-5fe8-494a-a2ae-4de4950d210f", "indicator--57b587e5-2434-4ec2-8ca5-4130950d210f", "indicator--57b587e5-db1c-4d77-987c-4dc8950d210f", "indicator--57b587e5-c628-47bf-a9c6-4710950d210f", "indicator--57b587e5-9048-4774-ac15-47f7950d210f", "indicator--57b587e6-65cc-4f03-be4b-420b950d210f", "indicator--57b587e6-ef54-4a59-850d-4801950d210f", "indicator--57b587e6-2124-4f69-b178-412f950d210f", "indicator--57b587e6-aac0-4305-b50b-4c54950d210f", "indicator--57b587e6-d284-4e3a-a8d0-4368950d210f", "indicator--57b587e7-ba48-49d0-81bc-4a21950d210f", "indicator--57b587e7-8428-4621-982a-44cf950d210f", "indicator--57b587e7-9fdc-4965-8caf-4b5a950d210f", "indicator--57b587e7-121c-480e-a527-4cd6950d210f", "indicator--57b587e7-dd68-46af-906f-4177950d210f", "indicator--57b587e7-bec4-47af-b1ef-4c70950d210f", "indicator--57b587e8-9c04-4b74-bc75-4cd4950d210f", "indicator--57b587e8-e88c-4446-b729-4bb9950d210f", "indicator--57b587e8-461c-468d-98bb-474c950d210f", "indicator--57b587e8-ca88-4788-ab05-424f950d210f", "indicator--57b587e8-ec70-4c3f-aa89-4f8b950d210f", "indicator--57b587e9-540c-4e6a-a88b-490e950d210f", "indicator--57b587e9-2fac-4c43-95be-4580950d210f", "indicator--57b587e9-8768-47c0-8ab4-460f950d210f", "indicator--57b587e9-1174-4086-8cb2-4629950d210f", "indicator--57b587e9-c424-49d5-b976-469a950d210f", "indicator--57b587e9-7484-49e2-9f4d-467e950d210f", "indicator--57b587ea-0110-4aff-8ec9-4a8f950d210f", "indicator--57b587ea-c884-4ded-8722-4f81950d210f", "indicator--57b587ea-3744-4deb-8da8-4704950d210f", "indicator--57b587ea-f0f4-400e-974f-4ad5950d210f", "indicator--57b587ea-9b8c-4a1e-9902-42f5950d210f", "indicator--57b587ea-b6f4-42fa-bee2-4d45950d210f", "indicator--57b587eb-0414-4aaf-bdec-4dce950d210f", "indicator--57b587eb-b6fc-406e-8b6b-415d950d210f", "indicator--57b587eb-4930-4fb5-ba97-4114950d210f", "indicator--57b587eb-84d0-41f7-88a9-42a7950d210f", "indicator--57b587eb-c7ac-4906-a659-4937950d210f", "indicator--57b587ec-2a5c-4a1f-aae2-41af950d210f", "indicator--57b587ec-e6ac-4d52-aa9f-4a5d950d210f", "indicator--57b587ec-5ce8-433e-a154-4e74950d210f", "indicator--57b587ec-265c-4db0-adab-409e950d210f", "indicator--57b587ec-3f24-43a1-b233-4143950d210f", "indicator--57b587ec-cacc-4d98-8e5e-487b950d210f", "indicator--57b587ed-8a34-4d34-873e-4350950d210f", "indicator--57b587ed-7ee0-4f1b-a417-4b9a950d210f", "indicator--57b587ed-b350-4670-b00f-438d950d210f", "indicator--57b587ed-8d90-4c6f-ba84-4e78950d210f", "indicator--57b587ed-f77c-4782-98fd-4837950d210f", "indicator--57b587ed-2e14-4fc6-8fc3-412b950d210f", "indicator--57b587ee-f77c-49a0-b98a-4422950d210f", "indicator--57b587ee-1bb0-4452-a054-4521950d210f", "indicator--57b587ee-e800-45c7-94a3-452c950d210f", "indicator--57b587ee-3b7c-4941-b489-479c950d210f", "indicator--57b587ee-559c-4c82-89f5-4288950d210f", "indicator--57b587ef-6864-468c-9d64-49e4950d210f", "indicator--57b587ef-beb4-4312-b1dc-4c96950d210f", "indicator--57b587ef-e5b0-4da8-a6ec-431e950d210f", "indicator--57b587ef-cc5c-45e8-a71a-4e75950d210f", "indicator--57b587ef-0f38-40ab-99ff-4551950d210f", "indicator--57b587ef-aca0-4a07-ac9c-47f8950d210f", "indicator--57b587f0-a6f8-4367-8cde-4146950d210f", "indicator--57b587f0-0c2c-4eb7-b9d1-4d76950d210f", "indicator--57b587f0-ea00-4d63-91ef-4b49950d210f", "indicator--57b587f0-18bc-405f-a177-4eb5950d210f", "indicator--57b587f0-96cc-4e67-9d76-4d20950d210f", "indicator--57b587f0-4080-44ba-b457-4674950d210f", "indicator--57b587f1-98ec-4159-bfc1-4673950d210f", "indicator--57b587f1-d014-447f-8f75-431c950d210f", "indicator--57b587f1-fa14-475b-915d-4131950d210f", "indicator--57b587f1-2688-42b6-b4b9-4a8e950d210f", "indicator--57b587f1-37e4-44d5-a96a-45ba950d210f", "indicator--57b587f2-4fb8-4dc9-98aa-4bb8950d210f", "indicator--57b587f2-65b0-44a4-9d80-463d950d210f", "indicator--57b587f2-aed8-49bb-8911-4f6e950d210f", "indicator--57b587f2-46f8-4e96-b957-42f6950d210f", "indicator--57b587f2-3ce4-4ccc-9e03-4710950d210f", "indicator--57b587f2-6078-4e6f-9359-42ad950d210f", "indicator--57b587f3-d7d0-4f1b-b163-439d950d210f", "indicator--57b587f3-0024-4b6d-a05d-4b5a950d210f", "indicator--57b587f3-b4dc-4750-b0a2-4584950d210f", "indicator--57b587f3-69c0-4a32-8ff1-4d95950d210f", "indicator--57b587f3-44f4-4f1c-b6af-469f950d210f", "indicator--57b587f4-8d54-46b7-be12-437e950d210f", "indicator--57b587f4-d5bc-40c8-8c83-4413950d210f", "indicator--57b587f4-480c-4fb3-8a0a-494f950d210f", "indicator--57b587f4-a374-4cce-b5bb-4598950d210f", "indicator--57b587f4-81d8-4178-99b2-400a950d210f", "indicator--57b587f4-68fc-4e83-89cf-41ce950d210f", "indicator--57b587f5-d9f8-4e63-b9a2-429e950d210f", "indicator--57b587f5-1f90-479a-a3f9-4b1a950d210f", "indicator--57b587f5-a974-4c7b-8dcb-42d2950d210f", "indicator--57b587f5-3674-48aa-8a91-47b1950d210f", "indicator--57b587f5-cabc-402e-8269-4c25950d210f", "indicator--57b587f5-7904-4976-80a0-406e950d210f", "indicator--57b587f6-5a00-48f1-8a82-4b61950d210f", "indicator--57b587f6-9dd8-4824-9442-4f6d950d210f", "indicator--57b587f6-0598-4539-b20c-4eab950d210f", "indicator--57b587f6-568c-4922-9635-44b0950d210f", "indicator--57b587f6-c308-488c-be45-4754950d210f", "indicator--57b587f7-4070-457b-a269-4bc9950d210f", "indicator--57b587f7-65d4-4ddd-bf8f-4699950d210f", "indicator--57b587f7-5fc0-4109-81bd-478a950d210f", "indicator--57b587f7-08c0-46ac-ae70-483f950d210f", "indicator--57b587f7-14e8-47f2-b8b1-434a950d210f", "indicator--57b587f7-d404-4567-a2b9-4577950d210f", "indicator--57b587f8-a898-444b-9eab-48c8950d210f", "indicator--57b587f8-a6b8-4e60-9558-4e3b950d210f", "indicator--57b587f8-21f8-45ba-b7ff-4b2f950d210f", "indicator--57b587f8-c0bc-40df-89d2-4ff9950d210f", "indicator--57b587f8-cc10-4b42-b71b-407c950d210f", "indicator--57b587f9-4368-4d90-9030-4164950d210f", "indicator--57b587f9-9cdc-415f-a73d-496b950d210f", "indicator--57b587f9-bb18-4ce0-a84e-49d9950d210f", "indicator--57b587f9-6ec8-4478-983a-4aae950d210f", "indicator--57b587f9-f918-4f06-8757-419c950d210f", "indicator--57b587fa-e5bc-4ffe-a213-4de3950d210f", "indicator--57b587fa-e7e4-4c16-bdf7-4558950d210f", "indicator--57b587fa-b9a8-467e-8332-4d24950d210f", "indicator--57b587fa-6540-4ef2-b3e4-496a950d210f", "indicator--57b587fa-22fc-451e-93d2-4972950d210f", "indicator--57b587fa-9054-4f7d-a43b-4cd1950d210f", "indicator--57b587fb-c154-4406-af24-41f5950d210f", "indicator--57b587fb-f6b4-4c10-b507-4d5f950d210f", "indicator--57b587fb-1dcc-4cf0-bae8-4b20950d210f", "indicator--57b587fb-edf8-4fba-88d0-4923950d210f", "indicator--57b587fb-7948-4093-95d2-4ae4950d210f", "indicator--57b587fb-ae30-493d-b784-4811950d210f", "indicator--57b587fc-76a4-4ae0-9d55-4593950d210f", "indicator--57b587fc-0d78-45a7-96bb-4ace950d210f", "indicator--57b587fc-25c4-47ad-9478-4888950d210f", "indicator--57b587fc-8eb4-4f11-baee-49a5950d210f", "indicator--57b587fc-ebe4-468c-9011-4c4c950d210f", "indicator--57b587fd-6bc4-4e41-9720-4ade950d210f", "indicator--57b587fd-3354-424c-a1b3-44cd950d210f", "indicator--57b587fd-0a10-4014-a286-4683950d210f", "indicator--57b587fd-fde0-4335-bc6f-4b39950d210f", "indicator--57b587fd-e9ec-43b0-aacd-43b2950d210f", "indicator--57b587fd-6774-4e59-ad41-4bb0950d210f", "indicator--57b587fe-14ac-478c-aba8-473f950d210f", "indicator--57b587fe-40fc-4dcd-b4ce-4011950d210f", "indicator--57b587fe-4130-4b9b-96cf-43e5950d210f", "indicator--57b587fe-538c-44c4-813f-49f6950d210f", "indicator--57b587fe-1f98-465d-a40d-4ccc950d210f", "indicator--57b587ff-fa90-456a-a151-48ce950d210f", "indicator--57b587ff-6ec0-49d6-878d-489f950d210f", "indicator--57b587ff-9e28-427e-9282-4c7a950d210f", "indicator--57b587ff-444c-4c74-a339-4f40950d210f", "indicator--57b587ff-eef4-4439-a175-4467950d210f", "indicator--57b587ff-3404-417d-bb23-4ebd950d210f", "indicator--57b58800-07b0-44c0-9224-432d950d210f", "indicator--57b58800-00b8-40bc-967b-4317950d210f", "indicator--57b58800-8af4-4cf8-b69c-44a0950d210f", "indicator--57b58800-b5d8-45d3-bcb5-4876950d210f", "indicator--57b58800-4ae0-4f91-b0b0-4eba950d210f", "indicator--57b58801-c254-4415-916d-4c63950d210f", "indicator--57b58801-9444-490c-87fe-493b950d210f", "indicator--57b58801-0220-48c3-8cac-4f84950d210f", "indicator--57b58801-8c64-406c-acfa-4ca5950d210f", "indicator--57b58801-b470-42f2-b7e1-4cce950d210f", "indicator--57b58801-b464-4681-9cb3-463f950d210f", "indicator--57b58802-5bf8-4ca7-b3bf-4584950d210f", "indicator--57b58802-d600-456b-9ef7-4e98950d210f", "indicator--57b58802-e1fc-4198-96f5-4cd3950d210f", "indicator--57b58802-2f24-413b-a11e-4c6a950d210f", "indicator--57b58802-09d0-40ad-97c2-42ed950d210f", "indicator--57b58803-e490-4a2d-94a2-4302950d210f", "indicator--57b58803-2848-48ad-a4f8-40ce950d210f", "indicator--57b58803-b214-4623-b208-4bc5950d210f", "indicator--57b58803-3b8c-4c2f-816e-492d950d210f", "indicator--57b58803-7cdc-4c19-8a1c-4084950d210f", "indicator--57b58804-68a0-45a2-b584-4b3f950d210f", "indicator--57b58804-1f84-47eb-a141-4ed5950d210f", "indicator--57b58804-e220-4719-860f-4856950d210f", "indicator--57b58804-07e8-47c0-a3b8-434e950d210f", "indicator--57b58804-fc04-49fc-9149-47e9950d210f", "indicator--57b58804-074c-4641-96fc-47c1950d210f", "indicator--57b58805-b76c-450e-b844-4bc2950d210f", "indicator--57b58805-0c68-4145-9a19-422c950d210f", "indicator--57b58805-7718-412c-9670-4868950d210f", "indicator--57b58805-d14c-43e3-9d78-4971950d210f", "indicator--57b58805-2f9c-4d34-85f8-4bab950d210f", "indicator--57b58806-d0e0-4322-b9bb-461e950d210f", "indicator--57b58806-e4a0-4fcd-b1b7-457a950d210f", "indicator--57b58806-a914-433c-83ee-49c0950d210f", "indicator--57b58806-4a6c-49bf-a1a8-4c86950d210f", "indicator--57b58806-44ac-4bb4-b193-4e00950d210f", "indicator--57b58807-4c84-4fd6-a11b-41bc950d210f", "indicator--57b58807-da5c-4425-a474-4004950d210f", "indicator--57b58807-09c4-47d9-8ac0-4d24950d210f", "indicator--57b58807-3c4c-49a0-821f-496b950d210f", "indicator--57b58807-4204-4de9-8fe8-46f7950d210f", "indicator--57b58807-141c-47b2-a683-4383950d210f", "indicator--57b58808-1590-4290-bcf7-4f67950d210f", "indicator--57b58808-c728-4af2-8ae0-4ba2950d210f", "indicator--57b58808-74d8-4125-9b96-4e67950d210f", "indicator--57b58808-9a90-40b7-b071-4f8f950d210f", "indicator--57b58808-3c68-47dc-9873-44d1950d210f", "indicator--57b58809-1c50-463b-8309-4a28950d210f", "indicator--57b58809-e984-4db8-80d7-4d63950d210f", "indicator--57b58809-3a54-465a-ae32-4872950d210f", "indicator--57b58809-d5c0-46e1-bc3e-413e950d210f", "indicator--57b58809-be00-4b39-8a96-423c950d210f", "indicator--57b5880a-9738-491f-8be7-4201950d210f", "indicator--57b5880a-9a28-45ed-9ae3-4276950d210f", "indicator--57b5880a-4fe4-4648-a6d6-42ba950d210f", "indicator--57b5880a-f598-46c3-9d2f-4ee7950d210f", "indicator--57b5880a-7404-4ab6-9cee-486f950d210f", "indicator--57b5880b-0f0c-4bb2-9dff-43eb950d210f", "indicator--57b5880b-d000-4218-998b-4dbf950d210f", "indicator--57b5880b-d894-472c-a071-425c950d210f", "indicator--57b5880b-ed18-4f18-9cd1-4830950d210f", "indicator--57b5880b-de80-4d1f-bd53-4ed5950d210f", "indicator--57b5880c-1ba4-479f-a2b4-48db950d210f", "indicator--57b5880c-b8ec-4b18-909d-4f93950d210f", "indicator--57b5880c-60e4-458c-8fb9-48a5950d210f", "indicator--57b5880c-f120-4bb6-8b8e-47ec950d210f", "indicator--57b5880c-6828-40ca-8b07-4fee950d210f", "indicator--57b5880d-abec-4529-a953-4d1f950d210f", "indicator--57b5880d-cad0-4890-8757-4341950d210f", "indicator--57b5880d-bcf8-43fb-abfa-4d3c950d210f", "indicator--57b5880d-6d3c-4a5c-b52a-4b85950d210f", "indicator--57b5880d-5844-4a56-beb8-42d0950d210f", "indicator--57b5880e-f5c8-4a10-9e6d-4320950d210f", "indicator--57b5880e-2b84-4cf1-a442-4753950d210f", "indicator--57b5880e-fa1c-43bb-a015-409a950d210f", "indicator--57b5880e-4810-45cd-9928-4842950d210f", "indicator--57b5880e-22c4-4601-aa2c-49b5950d210f", "indicator--57b5880f-0514-4bec-9190-4c3f950d210f", "indicator--57b5880f-b090-426c-902d-4375950d210f", "indicator--57b5880f-77ec-4d92-a5f4-46c2950d210f", "indicator--57b5880f-5998-47d8-8712-4b89950d210f", "indicator--57b5880f-3028-431d-ab09-4935950d210f", "indicator--57b5880f-62b8-49e8-b387-4470950d210f", "indicator--57b58810-c578-46b0-ac43-4c17950d210f", "indicator--57b58810-2868-4972-94f8-43f6950d210f", "indicator--57b58810-0de0-4f56-ac97-4d7e950d210f", "indicator--57b58810-b9e4-447f-b29b-4607950d210f", "indicator--57b58810-d97c-40cb-9134-4f2a950d210f", "indicator--57b58811-9c14-4aa7-a49d-400f950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "OSINT" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57b586ee-7d90-41e0-8c44-4de2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T09:59:10.000Z", "modified": "2016-08-18T09:59:10.000Z", "first_observed": "2016-08-18T09:59:10Z", "last_observed": "2016-08-18T09:59:10Z", "number_observed": 1, "object_refs": [ "url--57b586ee-7d90-41e0-8c44-4de2950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--57b586ee-7d90-41e0-8c44-4de2950d210f", "value": "https://otx.alienvault.com/pulse/57b4e29fd19e030139028f91/" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dc-a958-4371-8157-4064950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:08.000Z", "modified": "2016-08-18T10:03:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '222.186.34.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dc-e838-4f71-9183-4d23950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:08.000Z", "modified": "2016-08-18T10:03:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.116.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dc-9e88-4bad-bb6b-4ba0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:08.000Z", "modified": "2016-08-18T10:03:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.10.199.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dc-e100-43ec-9182-4acb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:08.000Z", "modified": "2016-08-18T10:03:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.198.33.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dd-be90-48ee-a455-435c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:09.000Z", "modified": "2016-08-18T10:03:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.5.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dd-a60c-4022-87ac-48e6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:09.000Z", "modified": "2016-08-18T10:03:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.57.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dd-6ac4-4cf1-ba20-4169950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:09.000Z", "modified": "2016-08-18T10:03:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.148.4.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dd-2878-4c5f-a327-413e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:09.000Z", "modified": "2016-08-18T10:03:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.40.90.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587dd-0fc4-4f80-b761-4bdb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:09.000Z", "modified": "2016-08-18T10:03:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.63.79.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587de-e524-4e21-b5a4-429d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:10.000Z", "modified": "2016-08-18T10:03:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '136.243.73.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587de-272c-4ad6-817d-413d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:10.000Z", "modified": "2016-08-18T10:03:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.18.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587de-6134-4884-bf7b-4285950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:10.000Z", "modified": "2016-08-18T10:03:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.40.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587de-cc00-403e-b47d-472a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:10.000Z", "modified": "2016-08-18T10:03:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.47.80.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587de-20ec-4d1b-a164-43f3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:10.000Z", "modified": "2016-08-18T10:03:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.16.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587df-cc8c-49c7-b9af-465c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:10.000Z", "modified": "2016-08-18T10:03:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.80.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587df-43f4-4813-8f88-4c10950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:11.000Z", "modified": "2016-08-18T10:03:11.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.45.78.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587df-2fdc-4885-9c90-4556950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:11.000Z", "modified": "2016-08-18T10:03:11.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.140.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587df-31bc-4605-8a84-4a96950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:11.000Z", "modified": "2016-08-18T10:03:11.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.27.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587df-7bdc-4309-b517-41e4950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:11.000Z", "modified": "2016-08-18T10:03:11.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '136.243.0.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587df-9718-4d29-a9c1-4f29950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:11.000Z", "modified": "2016-08-18T10:03:11.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.37.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e0-858c-408b-949f-451b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:12.000Z", "modified": "2016-08-18T10:03:12.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.39.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e0-71f0-4b2c-a555-4b3b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:12.000Z", "modified": "2016-08-18T10:03:12.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e0-a064-436b-9756-4f5b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:12.000Z", "modified": "2016-08-18T10:03:12.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.7.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e0-a820-47a6-a9b1-4a7f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:12.000Z", "modified": "2016-08-18T10:03:12.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e0-0824-4ca3-911a-4236950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:12.000Z", "modified": "2016-08-18T10:03:12.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.198.53.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e1-ad20-4c09-b159-458b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:13.000Z", "modified": "2016-08-18T10:03:13.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.41.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e1-c04c-4fda-a64d-474a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:13.000Z", "modified": "2016-08-18T10:03:13.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e1-0198-48c7-96ac-4a17950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:13.000Z", "modified": "2016-08-18T10:03:13.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.100.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e1-1080-4a65-baa3-4bb1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:13.000Z", "modified": "2016-08-18T10:03:13.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '148.251.230.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e1-0d88-483a-99b7-4c99950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:13.000Z", "modified": "2016-08-18T10:03:13.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.198.38.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e1-a780-4b24-a614-4215950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:13.000Z", "modified": "2016-08-18T10:03:13.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.29.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e2-76a0-4e55-8a3f-4191950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:14.000Z", "modified": "2016-08-18T10:03:14.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.37.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e2-2ba0-407b-81a0-4e56950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:14.000Z", "modified": "2016-08-18T10:03:14.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.4.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e2-d780-49b4-ab1f-49dc950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:14.000Z", "modified": "2016-08-18T10:03:14.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e2-5634-46e3-8a8e-4300950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:14.000Z", "modified": "2016-08-18T10:03:14.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.45.76.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e2-e7d4-4216-a172-4b2a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:14.000Z", "modified": "2016-08-18T10:03:14.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.56.82.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e3-ba68-4e39-ab40-4fd2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:15.000Z", "modified": "2016-08-18T10:03:15.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.11.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e3-a388-4b83-bdae-48f5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:15.000Z", "modified": "2016-08-18T10:03:15.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.198.134.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e3-8aac-46d8-88f5-4b72950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:15.000Z", "modified": "2016-08-18T10:03:15.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.43.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e3-c778-407b-bdbb-4477950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:15.000Z", "modified": "2016-08-18T10:03:15.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.46.64.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e3-c114-4401-aabd-47bd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:15.000Z", "modified": "2016-08-18T10:03:15.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.79.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e3-1b7c-4a27-862b-46e2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:15.000Z", "modified": "2016-08-18T10:03:15.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.198.141.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e4-a894-4f49-8103-44fb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:16.000Z", "modified": "2016-08-18T10:03:16.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '63.141.229.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e4-1818-4576-a5a4-46a3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:16.000Z", "modified": "2016-08-18T10:03:16.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.68.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e4-fe3c-4d7e-9bc2-44a7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:16.000Z", "modified": "2016-08-18T10:03:16.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.73.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e4-1f10-45d7-ae17-4ffb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:16.000Z", "modified": "2016-08-18T10:03:16.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.106.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e4-ded8-4857-8564-4767950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:16.000Z", "modified": "2016-08-18T10:03:16.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.239.207.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e5-efd8-4161-9ae6-4101950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:17.000Z", "modified": "2016-08-18T10:03:17.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.62.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e5-5fe8-494a-a2ae-4de4950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:17.000Z", "modified": "2016-08-18T10:03:17.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.73.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e5-2434-4ec2-8ca5-4130950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:17.000Z", "modified": "2016-08-18T10:03:17.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.150.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e5-db1c-4d77-987c-4dc8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:17.000Z", "modified": "2016-08-18T10:03:17.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.94.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e5-c628-47bf-a9c6-4710950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:17.000Z", "modified": "2016-08-18T10:03:17.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.11.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e5-9048-4774-ac15-47f7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:17.000Z", "modified": "2016-08-18T10:03:17.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.82.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e6-65cc-4f03-be4b-420b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:18.000Z", "modified": "2016-08-18T10:03:18.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '31.6.35.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e6-ef54-4a59-850d-4801950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:18.000Z", "modified": "2016-08-18T10:03:18.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.11.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e6-2124-4f69-b178-412f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:18.000Z", "modified": "2016-08-18T10:03:18.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.44.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e6-aac0-4305-b50b-4c54950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:18.000Z", "modified": "2016-08-18T10:03:18.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.74.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e6-d284-4e3a-a8d0-4368950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:18.000Z", "modified": "2016-08-18T10:03:18.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.98.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e7-ba48-49d0-81bc-4a21950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:19.000Z", "modified": "2016-08-18T10:03:19.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '172.98.196.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e7-8428-4621-982a-44cf950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:19.000Z", "modified": "2016-08-18T10:03:19.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.81.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e7-9fdc-4965-8caf-4b5a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:19.000Z", "modified": "2016-08-18T10:03:19.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.44.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e7-121c-480e-a527-4cd6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:19.000Z", "modified": "2016-08-18T10:03:19.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.59.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e7-dd68-46af-906f-4177950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:19.000Z", "modified": "2016-08-18T10:03:19.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.84.113']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e7-bec4-47af-b1ef-4c70950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:19.000Z", "modified": "2016-08-18T10:03:19.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.101.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e8-9c04-4b74-bc75-4cd4950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:20.000Z", "modified": "2016-08-18T10:03:20.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.204.238.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e8-e88c-4446-b729-4bb9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:20.000Z", "modified": "2016-08-18T10:03:20.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.11.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e8-461c-468d-98bb-474c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:20.000Z", "modified": "2016-08-18T10:03:20.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.107.113']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e8-ca88-4788-ab05-424f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:20.000Z", "modified": "2016-08-18T10:03:20.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.67.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e8-ec70-4c3f-aa89-4f8b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:20.000Z", "modified": "2016-08-18T10:03:20.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.99.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e9-540c-4e6a-a88b-490e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:21.000Z", "modified": "2016-08-18T10:03:21.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.45.73.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e9-2fac-4c43-95be-4580950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:21.000Z", "modified": "2016-08-18T10:03:21.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.158.113']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e9-8768-47c0-8ab4-460f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:21.000Z", "modified": "2016-08-18T10:03:21.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.43.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e9-1174-4086-8cb2-4629950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:21.000Z", "modified": "2016-08-18T10:03:21.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.111.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e9-c424-49d5-b976-469a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:21.000Z", "modified": "2016-08-18T10:03:21.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.46.94.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587e9-7484-49e2-9f4d-467e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:21.000Z", "modified": "2016-08-18T10:03:21.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.40.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ea-0110-4aff-8ec9-4a8f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:22.000Z", "modified": "2016-08-18T10:03:22.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.9.114.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ea-c884-4ded-8722-4f81950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:22.000Z", "modified": "2016-08-18T10:03:22.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '148.251.21.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ea-3744-4deb-8da8-4704950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:22.000Z", "modified": "2016-08-18T10:03:22.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.87.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ea-f0f4-400e-974f-4ad5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:22.000Z", "modified": "2016-08-18T10:03:22.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.198.53.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ea-9b8c-4a1e-9902-42f5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:22.000Z", "modified": "2016-08-18T10:03:22.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.130.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ea-b6f4-42fa-bee2-4d45950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:22.000Z", "modified": "2016-08-18T10:03:22.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.44.105']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587eb-0414-4aaf-bdec-4dce950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:23.000Z", "modified": "2016-08-18T10:03:23.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.66.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587eb-b6fc-406e-8b6b-415d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:23.000Z", "modified": "2016-08-18T10:03:23.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.140.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587eb-4930-4fb5-ba97-4114950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:23.000Z", "modified": "2016-08-18T10:03:23.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.78.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587eb-84d0-41f7-88a9-42a7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:23.000Z", "modified": "2016-08-18T10:03:23.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.147.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587eb-c7ac-4906-a659-4937950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:23.000Z", "modified": "2016-08-18T10:03:23.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.7.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ec-2a5c-4a1f-aae2-41af950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:24.000Z", "modified": "2016-08-18T10:03:24.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.50.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ec-e6ac-4d52-aa9f-4a5d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:24.000Z", "modified": "2016-08-18T10:03:24.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.86.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ec-5ce8-433e-a154-4e74950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:24.000Z", "modified": "2016-08-18T10:03:24.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.106.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ec-265c-4db0-adab-409e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:24.000Z", "modified": "2016-08-18T10:03:24.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ec-3f24-43a1-b233-4143950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:24.000Z", "modified": "2016-08-18T10:03:24.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.65.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ec-cacc-4d98-8e5e-487b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:24.000Z", "modified": "2016-08-18T10:03:24.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.71.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ed-8a34-4d34-873e-4350950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:25.000Z", "modified": "2016-08-18T10:03:25.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.65.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ed-7ee0-4f1b-a417-4b9a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:25.000Z", "modified": "2016-08-18T10:03:25.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '154.16.199.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ed-b350-4670-b00f-438d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:25.000Z", "modified": "2016-08-18T10:03:25.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.46.49.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ed-8d90-4c6f-ba84-4e78950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:25.000Z", "modified": "2016-08-18T10:03:25.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.224.160.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ed-f77c-4782-98fd-4837950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:25.000Z", "modified": "2016-08-18T10:03:25.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.61.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ed-2e14-4fc6-8fc3-412b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:25.000Z", "modified": "2016-08-18T10:03:25.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.59.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ee-f77c-49a0-b98a-4422950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:26.000Z", "modified": "2016-08-18T10:03:26.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.7.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ee-1bb0-4452-a054-4521950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:26.000Z", "modified": "2016-08-18T10:03:26.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.110.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ee-e800-45c7-94a3-452c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:26.000Z", "modified": "2016-08-18T10:03:26.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.144.30.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ee-3b7c-4941-b489-479c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:26.000Z", "modified": "2016-08-18T10:03:26.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.102.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ee-559c-4c82-89f5-4288950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:26.000Z", "modified": "2016-08-18T10:03:26.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.38.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ef-6864-468c-9d64-49e4950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:27.000Z", "modified": "2016-08-18T10:03:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.87.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ef-beb4-4312-b1dc-4c96950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:27.000Z", "modified": "2016-08-18T10:03:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.117.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ef-e5b0-4da8-a6ec-431e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:27.000Z", "modified": "2016-08-18T10:03:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.28.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ef-cc5c-45e8-a71a-4e75950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:27.000Z", "modified": "2016-08-18T10:03:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.104.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ef-0f38-40ab-99ff-4551950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:27.000Z", "modified": "2016-08-18T10:03:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.74.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ef-aca0-4a07-ac9c-47f8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:27.000Z", "modified": "2016-08-18T10:03:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.46.88.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f0-a6f8-4367-8cde-4146950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:28.000Z", "modified": "2016-08-18T10:03:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.56.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f0-0c2c-4eb7-b9d1-4d76950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:28.000Z", "modified": "2016-08-18T10:03:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '148.251.69.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f0-ea00-4d63-91ef-4b49950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:28.000Z", "modified": "2016-08-18T10:03:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.30.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f0-18bc-405f-a177-4eb5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:28.000Z", "modified": "2016-08-18T10:03:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.29.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f0-96cc-4e67-9d76-4d20950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:28.000Z", "modified": "2016-08-18T10:03:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.77.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f0-4080-44ba-b457-4674950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:28.000Z", "modified": "2016-08-18T10:03:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.7.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f1-98ec-4159-bfc1-4673950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:29.000Z", "modified": "2016-08-18T10:03:29.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.95.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f1-d014-447f-8f75-431c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:29.000Z", "modified": "2016-08-18T10:03:29.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.48.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f1-fa14-475b-915d-4131950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:29.000Z", "modified": "2016-08-18T10:03:29.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.1.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f1-2688-42b6-b4b9-4a8e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:29.000Z", "modified": "2016-08-18T10:03:29.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.9.117.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f1-37e4-44d5-a96a-45ba950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:29.000Z", "modified": "2016-08-18T10:03:29.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.11.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f2-4fb8-4dc9-98aa-4bb8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:30.000Z", "modified": "2016-08-18T10:03:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.59.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f2-65b0-44a4-9d80-463d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:30.000Z", "modified": "2016-08-18T10:03:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f2-aed8-49bb-8911-4f6e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:30.000Z", "modified": "2016-08-18T10:03:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f2-46f8-4e96-b957-42f6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:30.000Z", "modified": "2016-08-18T10:03:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.204.238.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f2-3ce4-4ccc-9e03-4710950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:30.000Z", "modified": "2016-08-18T10:03:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.11.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f2-6078-4e6f-9359-42ad950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:30.000Z", "modified": "2016-08-18T10:03:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.71.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f3-d7d0-4f1b-b163-439d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:31.000Z", "modified": "2016-08-18T10:03:31.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '52.222.3.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f3-0024-4b6d-a05d-4b5a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:31.000Z", "modified": "2016-08-18T10:03:31.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.229.172.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f3-b4dc-4750-b0a2-4584950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:31.000Z", "modified": "2016-08-18T10:03:31.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.132.102.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f3-69c0-4a32-8ff1-4d95950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:31.000Z", "modified": "2016-08-18T10:03:31.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.97.209.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f3-44f4-4f1c-b6af-469f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:31.000Z", "modified": "2016-08-18T10:03:31.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.121.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f4-8d54-46b7-be12-437e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:32.000Z", "modified": "2016-08-18T10:03:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.198.54.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f4-d5bc-40c8-8c83-4413950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:32.000Z", "modified": "2016-08-18T10:03:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.117.117.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f4-480c-4fb3-8a0a-494f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:32.000Z", "modified": "2016-08-18T10:03:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.59.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f4-a374-4cce-b5bb-4598950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:32.000Z", "modified": "2016-08-18T10:03:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.31.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f4-81d8-4178-99b2-400a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:32.000Z", "modified": "2016-08-18T10:03:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '183.61.146.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f4-68fc-4e83-89cf-41ce950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:32.000Z", "modified": "2016-08-18T10:03:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.115.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f5-d9f8-4e63-b9a2-429e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:33.000Z", "modified": "2016-08-18T10:03:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '203.12.202.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f5-1f90-479a-a3f9-4b1a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:33.000Z", "modified": "2016-08-18T10:03:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.9.143.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f5-a974-4c7b-8dcb-42d2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:33.000Z", "modified": "2016-08-18T10:03:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.130.223.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f5-3674-48aa-8a91-47b1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:33.000Z", "modified": "2016-08-18T10:03:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.99.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f5-cabc-402e-8269-4c25950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:33.000Z", "modified": "2016-08-18T10:03:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.70.209']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f5-7904-4976-80a0-406e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:33.000Z", "modified": "2016-08-18T10:03:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '168.181.105.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f6-5a00-48f1-8a82-4b61950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:34.000Z", "modified": "2016-08-18T10:03:34.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.82.192.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f6-9dd8-4824-9442-4f6d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:34.000Z", "modified": "2016-08-18T10:03:34.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '113.108.21.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f6-0598-4539-b20c-4eab950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:34.000Z", "modified": "2016-08-18T10:03:34.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.33.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f6-568c-4922-9635-44b0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:34.000Z", "modified": "2016-08-18T10:03:34.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.45.77.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f6-c308-488c-be45-4754950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:34.000Z", "modified": "2016-08-18T10:03:34.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f7-4070-457b-a269-4bc9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:35.000Z", "modified": "2016-08-18T10:03:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f7-65d4-4ddd-bf8f-4699950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:35.000Z", "modified": "2016-08-18T10:03:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f7-5fc0-4109-81bd-478a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:35.000Z", "modified": "2016-08-18T10:03:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.167.1.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f7-08c0-46ac-ae70-483f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:35.000Z", "modified": "2016-08-18T10:03:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.56.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f7-14e8-47f2-b8b1-434a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:35.000Z", "modified": "2016-08-18T10:03:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.49.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f7-d404-4567-a2b9-4577950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:35.000Z", "modified": "2016-08-18T10:03:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.208.143.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f8-a898-444b-9eab-48c8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:36.000Z", "modified": "2016-08-18T10:03:36.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.69.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f8-a6b8-4e60-9558-4e3b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:36.000Z", "modified": "2016-08-18T10:03:36.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '191.28.234.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f8-21f8-45ba-b7ff-4b2f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:36.000Z", "modified": "2016-08-18T10:03:36.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '191.201.174.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f8-c0bc-40df-89d2-4ff9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:36.000Z", "modified": "2016-08-18T10:03:36.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.118.93.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f8-cc10-4b42-b71b-407c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:36.000Z", "modified": "2016-08-18T10:03:36.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '191.195.104.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f9-4368-4d90-9030-4164950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:37.000Z", "modified": "2016-08-18T10:03:37.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.85.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f9-9cdc-415f-a73d-496b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:37.000Z", "modified": "2016-08-18T10:03:37.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.3.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f9-bb18-4ce0-a84e-49d9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:37.000Z", "modified": "2016-08-18T10:03:37.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.46.43.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f9-6ec8-4478-983a-4aae950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:37.000Z", "modified": "2016-08-18T10:03:37.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.214.103.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587f9-f918-4f06-8757-419c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:37.000Z", "modified": "2016-08-18T10:03:37.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.63.25.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fa-e5bc-4ffe-a213-4de3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:38.000Z", "modified": "2016-08-18T10:03:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.117.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fa-e7e4-4c16-bdf7-4558950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:38.000Z", "modified": "2016-08-18T10:03:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.94.173.209']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fa-b9a8-467e-8332-4d24950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:38.000Z", "modified": "2016-08-18T10:03:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.46.72.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fa-6540-4ef2-b3e4-496a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:38.000Z", "modified": "2016-08-18T10:03:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.10.208.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fa-22fc-451e-93d2-4972950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:38.000Z", "modified": "2016-08-18T10:03:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.109.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fa-9054-4f7d-a43b-4cd1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:38.000Z", "modified": "2016-08-18T10:03:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.117.241.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fb-c154-4406-af24-41f5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:39.000Z", "modified": "2016-08-18T10:03:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.66.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fb-f6b4-4c10-b507-4d5f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:39.000Z", "modified": "2016-08-18T10:03:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.223']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fb-1dcc-4cf0-bae8-4b20950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:39.000Z", "modified": "2016-08-18T10:03:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.94.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fb-edf8-4fba-88d0-4923950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:39.000Z", "modified": "2016-08-18T10:03:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '106.186.113.132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fb-7948-4093-95d2-4ae4950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:39.000Z", "modified": "2016-08-18T10:03:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fb-ae30-493d-b784-4811950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:39.000Z", "modified": "2016-08-18T10:03:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '191.18.114.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fc-76a4-4ae0-9d55-4593950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:40.000Z", "modified": "2016-08-18T10:03:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.71.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fc-0d78-45a7-96bb-4ace950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:40.000Z", "modified": "2016-08-18T10:03:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '116.31.116.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fc-25c4-47ad-9478-4888950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:40.000Z", "modified": "2016-08-18T10:03:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.79.5.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fc-8eb4-4f11-baee-49a5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:40.000Z", "modified": "2016-08-18T10:03:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.175.53.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fc-ebe4-468c-9011-4c4c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:40.000Z", "modified": "2016-08-18T10:03:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '180.97.244.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fd-6bc4-4e41-9720-4ade950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:41.000Z", "modified": "2016-08-18T10:03:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.229.172.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fd-3354-424c-a1b3-44cd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:41.000Z", "modified": "2016-08-18T10:03:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '116.31.116.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fd-0a10-4014-a286-4683950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:41.000Z", "modified": "2016-08-18T10:03:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.18.238.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fd-fde0-4335-bc6f-4b39950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:41.000Z", "modified": "2016-08-18T10:03:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '75.149.180.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fd-e9ec-43b0-aacd-43b2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:41.000Z", "modified": "2016-08-18T10:03:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.133.23.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fd-6774-4e59-ad41-4bb0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:41.000Z", "modified": "2016-08-18T10:03:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.18.238.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fe-14ac-478c-aba8-473f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:42.000Z", "modified": "2016-08-18T10:03:42.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.194.44.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fe-40fc-4dcd-b4ce-4011950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:42.000Z", "modified": "2016-08-18T10:03:42.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.194.44.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fe-4130-4b9b-96cf-43e5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:42.000Z", "modified": "2016-08-18T10:03:42.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.18.238.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fe-538c-44c4-813f-49f6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:42.000Z", "modified": "2016-08-18T10:03:42.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '200.72.2.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587fe-1f98-465d-a40d-4ccc950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:42.000Z", "modified": "2016-08-18T10:03:42.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.194.44.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ff-fa90-456a-a151-48ce950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:43.000Z", "modified": "2016-08-18T10:03:43.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.18.238.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ff-6ec0-49d6-878d-489f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:43.000Z", "modified": "2016-08-18T10:03:43.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.194.44.223']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ff-9e28-427e-9282-4c7a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:43.000Z", "modified": "2016-08-18T10:03:43.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.18.238.32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ff-444c-4c74-a339-4f40950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:43.000Z", "modified": "2016-08-18T10:03:43.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.194.44.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ff-eef4-4439-a175-4467950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:43.000Z", "modified": "2016-08-18T10:03:43.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.137.255.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b587ff-3404-417d-bb23-4ebd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:43.000Z", "modified": "2016-08-18T10:03:43.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '219.219.114.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58800-07b0-44c0-9224-432d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:44.000Z", "modified": "2016-08-18T10:03:44.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.18.238.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58800-00b8-40bc-967b-4317950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:44.000Z", "modified": "2016-08-18T10:03:44.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.45.74.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58800-8af4-4cf8-b69c-44a0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:44.000Z", "modified": "2016-08-18T10:03:44.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '202.47.167.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58800-b5d8-45d3-bcb5-4876950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:44.000Z", "modified": "2016-08-18T10:03:44.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58800-4ae0-4f91-b0b0-4eba950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:44.000Z", "modified": "2016-08-18T10:03:44.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58801-c254-4415-916d-4c63950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:45.000Z", "modified": "2016-08-18T10:03:45.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '221.194.44.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58801-9444-490c-87fe-493b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:45.000Z", "modified": "2016-08-18T10:03:45.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.173']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58801-0220-48c3-8cac-4f84950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:45.000Z", "modified": "2016-08-18T10:03:45.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.127.249.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58801-8c64-406c-acfa-4ca5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:45.000Z", "modified": "2016-08-18T10:03:45.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.170.66.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58801-b470-42f2-b7e1-4cce950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:45.000Z", "modified": "2016-08-18T10:03:45.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.93.187.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58801-b464-4681-9cb3-463f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:45.000Z", "modified": "2016-08-18T10:03:45.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.224.160.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58802-5bf8-4ca7-b3bf-4584950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:46.000Z", "modified": "2016-08-18T10:03:46.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.45.72.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58802-d600-456b-9ef7-4e98950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:46.000Z", "modified": "2016-08-18T10:03:46.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '222.186.34.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58802-e1fc-4198-96f5-4cd3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:46.000Z", "modified": "2016-08-18T10:03:46.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '115.248.223.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58802-2f24-413b-a11e-4c6a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:46.000Z", "modified": "2016-08-18T10:03:46.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.207.37.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58802-09d0-40ad-97c2-42ed950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:46.000Z", "modified": "2016-08-18T10:03:46.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '222.124.218.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58803-e490-4a2d-94a2-4302950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:47.000Z", "modified": "2016-08-18T10:03:47.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '152.254.77.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58803-2848-48ad-a4f8-40ce950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:47.000Z", "modified": "2016-08-18T10:03:47.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.168.210.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58803-b214-4623-b208-4bc5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:47.000Z", "modified": "2016-08-18T10:03:47.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '218.9.183.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58803-3b8c-4c2f-816e-492d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:47.000Z", "modified": "2016-08-18T10:03:47.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.45.75.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58803-7cdc-4c19-8a1c-4084950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:47.000Z", "modified": "2016-08-18T10:03:47.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.53.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58804-68a0-45a2-b584-4b3f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:48.000Z", "modified": "2016-08-18T10:03:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '222.186.58.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58804-1f84-47eb-a141-4ed5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:48.000Z", "modified": "2016-08-18T10:03:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '125.212.248.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58804-e220-4719-860f-4856950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:48.000Z", "modified": "2016-08-18T10:03:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '163.172.22.195']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58804-07e8-47c0-a3b8-434e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:48.000Z", "modified": "2016-08-18T10:03:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '211.107.51.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58804-fc04-49fc-9149-47e9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:48.000Z", "modified": "2016-08-18T10:03:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '218.29.54.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58804-074c-4641-96fc-47c1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:48.000Z", "modified": "2016-08-18T10:03:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.163.40.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58805-b76c-450e-b844-4bc2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:49.000Z", "modified": "2016-08-18T10:03:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '101.201.28.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58805-0c68-4145-9a19-422c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:49.000Z", "modified": "2016-08-18T10:03:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.154.63.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58805-7718-412c-9670-4868950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:49.000Z", "modified": "2016-08-18T10:03:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.91.250.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58805-d14c-43e3-9d78-4971950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:49.000Z", "modified": "2016-08-18T10:03:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.254.67.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58805-2f9c-4d34-85f8-4bab950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:49.000Z", "modified": "2016-08-18T10:03:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '72.9.144.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58806-d0e0-4322-b9bb-461e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:50.000Z", "modified": "2016-08-18T10:03:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58806-e4a0-4fcd-b1b7-457a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:50.000Z", "modified": "2016-08-18T10:03:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '187.89.81.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58806-a914-433c-83ee-49c0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:50.000Z", "modified": "2016-08-18T10:03:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.199.43.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58806-4a6c-49bf-a1a8-4c86950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:50.000Z", "modified": "2016-08-18T10:03:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.47.130.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58806-44ac-4bb4-b193-4e00950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:50.000Z", "modified": "2016-08-18T10:03:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '59.46.10.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58807-4c84-4fd6-a11b-41bc950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:51.000Z", "modified": "2016-08-18T10:03:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '152.241.121.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58807-da5c-4425-a474-4004950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:51.000Z", "modified": "2016-08-18T10:03:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.128.42.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58807-09c4-47d9-8ac0-4d24950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:51.000Z", "modified": "2016-08-18T10:03:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '66.36.169.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58807-3c4c-49a0-821f-496b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:51.000Z", "modified": "2016-08-18T10:03:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.131.37.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58807-4204-4de9-8fe8-46f7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:51.000Z", "modified": "2016-08-18T10:03:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '41.203.65.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58807-141c-47b2-a683-4383950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:51.000Z", "modified": "2016-08-18T10:03:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.14.141.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58808-1590-4290-bcf7-4f67950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:52.000Z", "modified": "2016-08-18T10:03:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.154.63.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58808-c728-4af2-8ae0-4ba2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:52.000Z", "modified": "2016-08-18T10:03:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.173.115.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58808-74d8-4125-9b96-4e67950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:52.000Z", "modified": "2016-08-18T10:03:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.170.101.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58808-9a90-40b7-b071-4f8f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:52.000Z", "modified": "2016-08-18T10:03:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '49.236.204.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58808-3c68-47dc-9873-44d1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:52.000Z", "modified": "2016-08-18T10:03:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '84.245.15.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58809-1c50-463b-8309-4a28950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:53.000Z", "modified": "2016-08-18T10:03:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '190.191.64.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58809-e984-4db8-80d7-4d63950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:53.000Z", "modified": "2016-08-18T10:03:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.236.96.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58809-3a54-465a-ae32-4872950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:53.000Z", "modified": "2016-08-18T10:03:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58809-d5c0-46e1-bc3e-413e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:53.000Z", "modified": "2016-08-18T10:03:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.147.61.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58809-be00-4b39-8a96-423c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:53.000Z", "modified": "2016-08-18T10:03:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.169.52.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880a-9738-491f-8be7-4201950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:54.000Z", "modified": "2016-08-18T10:03:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '61.82.71.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880a-9a28-45ed-9ae3-4276950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:54.000Z", "modified": "2016-08-18T10:03:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '61.82.71.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880a-4fe4-4648-a6d6-42ba950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:54.000Z", "modified": "2016-08-18T10:03:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.115.197.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880a-f598-46c3-9d2f-4ee7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:54.000Z", "modified": "2016-08-18T10:03:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '61.160.247.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880a-7404-4ab6-9cee-486f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:54.000Z", "modified": "2016-08-18T10:03:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.146.4.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880b-0f0c-4bb2-9dff-43eb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:55.000Z", "modified": "2016-08-18T10:03:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '191.26.64.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880b-d000-4218-998b-4dbf950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:55.000Z", "modified": "2016-08-18T10:03:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '1.9.79.191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880b-d894-472c-a071-425c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:55.000Z", "modified": "2016-08-18T10:03:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.147.98.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880b-ed18-4f18-9cd1-4830950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:55.000Z", "modified": "2016-08-18T10:03:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.254.44.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880b-de80-4d1f-bd53-4ed5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:55.000Z", "modified": "2016-08-18T10:03:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.137.0.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880c-1ba4-479f-a2b4-48db950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:56.000Z", "modified": "2016-08-18T10:03:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '119.81.113.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880c-b8ec-4b18-909d-4f93950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:56.000Z", "modified": "2016-08-18T10:03:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '118.26.133.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880c-60e4-458c-8fb9-48a5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:56.000Z", "modified": "2016-08-18T10:03:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '203.91.121.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880c-f120-4bb6-8b8e-47ec950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:56.000Z", "modified": "2016-08-18T10:03:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.39.114.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880c-6828-40ca-8b07-4fee950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:56.000Z", "modified": "2016-08-18T10:03:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '218.90.134.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880d-abec-4529-a953-4d1f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:57.000Z", "modified": "2016-08-18T10:03:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '200.11.218.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880d-cad0-4890-8757-4341950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:57.000Z", "modified": "2016-08-18T10:03:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '201.88.32.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880d-bcf8-43fb-abfa-4d3c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:57.000Z", "modified": "2016-08-18T10:03:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '222.138.139.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880d-6d3c-4a5c-b52a-4b85950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:57.000Z", "modified": "2016-08-18T10:03:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '202.114.107.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880d-5844-4a56-beb8-42d0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:57.000Z", "modified": "2016-08-18T10:03:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '58.213.69.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880e-f5c8-4a10-9e6d-4320950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:58.000Z", "modified": "2016-08-18T10:03:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '180.96.11.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880e-2b84-4cf1-a442-4753950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:58.000Z", "modified": "2016-08-18T10:03:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.25.40.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880e-fa1c-43bb-a015-409a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:58.000Z", "modified": "2016-08-18T10:03:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.133.131.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880e-4810-45cd-9928-4842950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:58.000Z", "modified": "2016-08-18T10:03:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '200.233.159.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880e-22c4-4601-aa2c-49b5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:58.000Z", "modified": "2016-08-18T10:03:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '113.21.228.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880f-0514-4bec-9190-4c3f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:59.000Z", "modified": "2016-08-18T10:03:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.163.128.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880f-b090-426c-902d-4375950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:59.000Z", "modified": "2016-08-18T10:03:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.118.8.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880f-77ec-4d92-a5f4-46c2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:59.000Z", "modified": "2016-08-18T10:03:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.91.14.127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880f-5998-47d8-8712-4b89950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:59.000Z", "modified": "2016-08-18T10:03:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.73.219.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880f-3028-431d-ab09-4935950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:59.000Z", "modified": "2016-08-18T10:03:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '152.241.210.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5880f-62b8-49e8-b387-4470950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:03:59.000Z", "modified": "2016-08-18T10:03:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.245.60.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:03:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58810-c578-46b0-ac43-4c17950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:00.000Z", "modified": "2016-08-18T10:04:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.3.144.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:04:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58810-2868-4972-94f8-43f6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:00.000Z", "modified": "2016-08-18T10:04:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '179.116.49.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:04:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58810-0de0-4f56-ac97-4d7e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:00.000Z", "modified": "2016-08-18T10:04:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.227.138.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:04:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58810-b9e4-447f-b29b-4607950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:00.000Z", "modified": "2016-08-18T10:04:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '187.1.204.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:04:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58810-d97c-40cb-9134-4f2a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:00.000Z", "modified": "2016-08-18T10:04:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.79.75.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:04:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b58811-9c14-4aa7-a49d-400f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T10:04:00.000Z", "modified": "2016-08-18T10:04:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.254.96.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T10:04:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }