436 lines
No EOL
12 KiB
JSON
436 lines
No EOL
12 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2015-07-27",
|
|
"extends_uuid": "",
|
|
"info": "OSINT Angler's best friends by SANS ISC Diary",
|
|
"publish_timestamp": "1438333925",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1438332041",
|
|
"uuid": "55bb3422-c610-4b66-aa54-4533950d210b",
|
|
"Orgc": {
|
|
"name": "CthulhuSPRL.be",
|
|
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"name": "tlp:white"
|
|
},
|
|
{
|
|
"colour": "#004646",
|
|
"name": "type:OSINT"
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331955",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "55bb3433-f880-4cde-92de-42af950d210b",
|
|
"value": "https://isc.sans.edu/forums/diary/Anglers+best+friends/19959/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331977",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3449-07b8-46ca-914a-468e950d210b",
|
|
"value": "148.251.167.57"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331977",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3449-5030-426e-9922-4ee4950d210b",
|
|
"value": "148.251.167.107"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331977",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3449-a088-49f3-81f9-4f08950d210b",
|
|
"value": "176.9.245.141"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331977",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3449-6ed4-4535-9abc-45a1950d210b",
|
|
"value": "176.9.245.140"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331978",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344a-d914-47a7-a818-4d69950d210b",
|
|
"value": "176.9.245.142"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331978",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344a-ba18-4092-8a61-4e26950d210b",
|
|
"value": "206.190.134.189"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331978",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344a-4ff0-4637-b379-4a88950d210b",
|
|
"value": "185.48.58.51"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331978",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344a-bc58-42fa-8efc-487a950d210b",
|
|
"value": "206.190.134.188"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331978",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344a-fbf8-4b51-ae7e-4d39950d210b",
|
|
"value": "206.190.134.190"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331978",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344a-6d84-41dd-b3c8-4878950d210b",
|
|
"value": "69.162.90.107"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331978",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344a-3fa8-4b20-9f00-416a950d210b",
|
|
"value": "69.162.64.156"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331979",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344b-216c-4ca8-a4bd-46d7950d210b",
|
|
"value": "69.162.116.123"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331979",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344b-8cb0-42e9-8aeb-447e950d210b",
|
|
"value": "185.43.223.165"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331979",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344b-2dc0-4b12-a36e-479d950d210b",
|
|
"value": "69.162.116.125"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331979",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344b-c82c-491f-8bb1-4aec950d210b",
|
|
"value": "216.245.213.141"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331979",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344b-8198-4ee3-a21b-491f950d210b",
|
|
"value": "69.162.86.36"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331979",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344b-1e38-4e4b-94a7-4d10950d210b",
|
|
"value": "69.162.64.158"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331979",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344b-6428-4bcc-9fdd-47c3950d210b",
|
|
"value": "216.245.213.138"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438331980",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb344c-95a4-42bf-9598-48d2950d210b",
|
|
"value": "185.43.223.164"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332038",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3486-c200-4ad6-88bd-49e2950d210b",
|
|
"value": "136.243.96.94"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332038",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3486-13c0-4acc-b1d6-4e09950d210b",
|
|
"value": "148.251.167.105"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3487-34bc-4922-990a-4d12950d210b",
|
|
"value": "148.251.167.51"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3487-2894-44f2-af41-405c950d210b",
|
|
"value": "148.251.167.97"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3487-4638-4383-ba51-482a950d210b",
|
|
"value": "176.9.245.139"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3487-2e80-4a7f-806b-4242950d210b",
|
|
"value": "178.63.173.166"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3487-d9d0-4d55-b4c8-4b05950d210b",
|
|
"value": "185.48.58.52"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3487-3954-497e-84ff-48e2950d210b",
|
|
"value": "209.190.51.212"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3487-f4ac-492e-a677-433d950d210b",
|
|
"value": "209.190.51.214"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3488-680c-4bc6-b732-4d22950d210b",
|
|
"value": "216.144.244.147"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3488-38dc-4270-891e-4077950d210b",
|
|
"value": "216.144.244.148"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3488-e6d4-4c22-8629-4128950d210b",
|
|
"value": "46.4.213.133"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3488-f10c-48e1-999d-41fc950d210b",
|
|
"value": "5.79.85.242"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3488-8604-48da-ac56-4b17950d210b",
|
|
"value": "63.143.53.46"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3488-b9f4-43cc-be29-45b3950d210b",
|
|
"value": "69.162.73.91"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3488-f18c-4459-ba59-4984950d210b",
|
|
"value": "74.63.217.222"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1438332041",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "55bb3489-77e8-47db-8ccc-476b950d210b",
|
|
"value": "74.63.237.182"
|
|
}
|
|
]
|
|
}
|
|
} |