{ "exported": 374, "events": [ { "id": "atk-mvwhxsyb-100", "ts": 1793456910803, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "69.254.179.67" }, "dst": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "72.203.135.252" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 82302, "intensity": 3, "intel": false, "mitre": "T1190", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwhxs4e-98", "ts": 1793456909726, "type": "botnet", "severity": "ELEVATED", "src": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "114.218.57.21" }, "dst": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "21.11.51.196" }, "port": 25, "service": "SMTP", "protocol": "UDP", "packets": 4700, "intensity": 6, "intel": true, "malware": "Bruteforce Source", "actor": "apt41", "mitre": "T1071", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwhxr72-96", "ts": 1793456908526, "type": "phishing", "severity": "LOW", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "27.145.252.85" }, "dst": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "220.219.66.52" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 71079, "intensity": 2, "intel": false, "actor": "fin7", "mitre": "T1566", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwhxqef-90", "ts": 1793456907495, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "196.71.198.119" }, "dst": { "city": "Manila", "country": "Philippines", "cc": "PH", "lat": 14.6, "lng": 120.98, "ip": "109.55.91.89" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 33049, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvwhxp8k-80", "ts": 1793456905988, "type": "ddos", "severity": "HIGH", "src": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "111.70.23.252" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "85.126.244.56" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 81527, "intensity": 8, "intel": true, "malware": "Bruteforce Source", "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwhxobb-72", "ts": 1793456904791, "type": "xss", "severity": "LOW", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "88.61.128.97" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "115.44.196.39" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 46345, "intensity": 10, "intel": false, "actor": "anonymous", "mitre": "T1059.007", "srcAsn": "AS3215 ORANGE" }, { "id": "atk-mvwhxnu9-68", "ts": 1793456904177, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Lima", "country": "Peru", "cc": "PE", "lat": -12.05, "lng": -77.04, "ip": "115.42.71.62" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "160.199.228.56" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 69337, "intensity": 9, "intel": true, "malware": "Bruteforce Source", "mitre": "T1486", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwhxm1k-62", "ts": 1793456901848, "type": "bruteforce", "severity": "LOW", "src": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "133.181.134.245" }, "dst": { "city": "Auckland", "country": "New Zealand", "cc": "NZ", "lat": -36.85, "lng": 174.76, "ip": "7.22.44.73" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 73852, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwhxl1d-60", "ts": 1793456900545, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "208.139.127.99" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "216.69.248.205" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 76668, "intensity": 9, "intel": false, "mitre": "T1498", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwhxdsq-46", "ts": 1793456891162, "type": "phishing", "severity": "LOW", "src": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "109.136.233.145" }, "dst": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "211.237.56.86" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 80912, "intensity": 5, "intel": false, "mitre": "T1566", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvwhx9pu-38", "ts": 1793456885874, "type": "ddos", "severity": "HIGH", "src": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "159.78.245.14" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "147.11.114.2" }, "port": 22, "service": "SSH", "protocol": "ICMP", "packets": 36980, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwhx40z-27", "ts": 1793456878499, "type": "bruteforce", "severity": "LOW", "src": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "147.58.154.31" }, "dst": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "82.220.10.120" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 32812, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS701 VERIZON" }, { "id": "atk-mvwhx06y-19", "ts": 1793456873530, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Ho Chi Minh City", "country": "Vietnam", "cc": "VN", "lat": 10.82, "lng": 106.63, "ip": "25.224.63.202" }, "dst": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "165.23.126.133" }, "port": 445, "service": "SMB", "protocol": "UDP", "packets": 67916, "intensity": 4, "intel": true, "malware": "Phishing Kit", "mitre": "T1071", "srcAsn": "AS4837 CHINA-UNICOM", "ioc": "roblox.ly", "feed": "OpenPhish" }, { "id": "atk-mvwheps5-2900", "ts": 1793456020229, "type": "botnet", "severity": "HIGH", "src": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "142.153.244.249" }, "dst": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "153.103.235.76" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 18946, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION IRON FRACTURE", "mitre": "T1071", "srcAsn": "AS7922 COMCAST", "chain": { "id": "chain-mvwheozh-23", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 2, "total": 3 } }, { "id": "atk-mvwhenub-2890", "ts": 1793456017715, "type": "bruteforce", "severity": "HIGH", "src": { "city": "Ho Chi Minh City", "country": "Vietnam", "cc": "VN", "lat": 10.82, "lng": 106.63, "ip": "70.242.95.188" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "29.113.166.81" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 75258, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION BROKEN CASCADE", "srcAsn": "AS4837 CHINA-UNICOM", "chain": { "id": "chain-mvwhenub-22", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 1, "total": 4 } }, { "id": "atk-mvwhemwg-2882", "ts": 1793456016496, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "29.48.37.91" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "171.93.197.32" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 62458, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1190", "srcAsn": "AS39386 STC" }, { "id": "atk-mvwhem2j-2876", "ts": 1793456015419, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Dhaka", "country": "Bangladesh", "cc": "BD", "lat": 23.81, "lng": 90.41, "ip": "54.218.143.172" }, "dst": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "114.136.228.221" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 38077, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS16509 AMAZON-02" }, { "id": "atk-mvwhelkh-2872", "ts": 1793456014769, "type": "malware", "severity": "ELEVATED", "src": { "city": "Rio de Janeiro", "country": "Brazil", "cc": "BR", "lat": -22.91, "lng": -43.17, "ip": "96.166.7.139" }, "dst": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "102.163.125.253" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 67688, "intensity": 9, "intel": false, "mitre": "T1204", "srcAsn": "AS30844 LIQUID-TELECOM" }, { "id": "atk-mvwhehb8-2859", "ts": 1793456009252, "type": "xss", "severity": "LOW", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "196.244.57.135" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "122.173.165.43" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 55823, "intensity": 10, "intel": false, "mitre": "T1059.007", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvwheh6t-2858", "ts": 1793456009093, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "223.49.132.193" }, "dst": { "city": "Lima", "country": "Peru", "cc": "PE", "lat": -12.05, "lng": -77.04, "ip": "186.250.231.74" }, "port": 53, "service": "DNS", "protocol": "UDP", "packets": 26466, "intensity": 10, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwhegb8-2851", "ts": 1793456007956, "type": "phishing", "severity": "LOW", "src": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "78.17.38.101" }, "dst": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "218.82.163.94" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 6863, "intensity": 7, "intel": false, "actor": "scattered", "mitre": "T1566", "srcAsn": "AS3269 TELECOM-ITALIA" }, { "id": "atk-mvwheenk-2838", "ts": 1793456005808, "type": "malware", "severity": "ELEVATED", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "122.187.230.81" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "217.141.225.86" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 84850, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1204", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwhe8jd-2826", "ts": 1793455997881, "type": "botnet", "severity": "HIGH", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "37.53.54.144" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "114.96.150.84" }, "port": 5432, "service": "PostgreSQL", "protocol": "UDP", "packets": 50606, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS3462 CHUNGHWA" }, { "id": "atk-mvwhdz69-2805", "ts": 1793455985745, "type": "phishing", "severity": "LOW", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "31.123.7.250" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "10.47.191.11" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 1481, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS5384 ETISALAT" }, { "id": "atk-mvwhdv4s-2776", "ts": 1793455980508, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "68.214.59.187" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "8.91.45.139" }, "port": 21, "service": "FTP", "protocol": "ICMP", "packets": 56247, "intensity": 7, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwhdt2p-2760", "ts": 1793455977841, "type": "mitm", "severity": "LOW", "src": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "213.0.178.248" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "166.178.41.147" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 21235, "intensity": 2, "intel": false, "mitre": "T1557", "srcAsn": "AS3215 ORANGE" }, { "id": "atk-mvwhdqjv-2742", "ts": 1793455974571, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "111.36.152.14" }, "dst": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "192.190.105.189" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 8286, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "fin7", "mitre": "T1110", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwhdp57-2731", "ts": 1793455972747, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Tashkent", "country": "Uzbekistan", "cc": "UZ", "lat": 41.3, "lng": 69.24, "ip": "194.203.161.94" }, "dst": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "174.190.194.82" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 66844, "intensity": 10, "intel": true, "malware": "Phishing Kit", "actor": "fin7", "mitre": "T1110", "srcAsn": "AS1299 TELIA", "ioc": "creationstags.cfd", "feed": "OpenPhish" }, { "id": "atk-mvwhdp2l-2730", "ts": 1793455972653, "type": "botnet", "severity": "HIGH", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "204.202.228.115" }, "dst": { "city": "Rio de Janeiro", "country": "Brazil", "cc": "BR", "lat": -22.91, "lng": -43.17, "ip": "35.69.149.150" }, "port": 21, "service": "FTP", "protocol": "UDP", "packets": 47970, "intensity": 10, "intel": true, "malware": "Phishing Kit", "actor": "apt41", "mitre": "T1071", "srcAsn": "AS12389 ROSTELECOM", "ioc": "gnla-fpe-rs5-1l86r9-xkmx.pages.dev", "feed": "OpenPhish" }, { "id": "atk-mvwhdmvq-2719", "ts": 1793455969814, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "164.224.46.109" }, "dst": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "187.196.35.22" }, "port": 8080, "service": "HTTP-ALT", "protocol": "UDP", "packets": 16672, "intensity": 3, "intel": false, "mitre": "T1071", "srcAsn": "AS4760 PCCW" }, { "id": "atk-mvwhdl5w-2705", "ts": 1793455967588, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "150.118.61.226" }, "dst": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "58.164.232.81" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 66723, "intensity": 10, "intel": false, "actor": "scattered", "mitre": "T1566", "srcAsn": "AS9808 CHINA-MOBILE" }, { "id": "atk-mvwhdl1t-2704", "ts": 1793455967441, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "65.55.70.177" }, "dst": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "89.19.236.190" }, "port": 22, "service": "SSH", "protocol": "UDP", "packets": 70024, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS16276 OVH" }, { "id": "atk-mvwhdkny-2701", "ts": 1793455966942, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "48.140.172.160" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "92.237.244.238" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 5231, "intensity": 8, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwhdjq4-2694", "ts": 1793455965724, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "205.137.69.88" }, "dst": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "40.144.102.254" }, "port": 8080, "service": "HTTP-ALT", "protocol": "ICMP", "packets": 59851, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS9121 TURK-TELEKOM" }, { "id": "atk-mvwhdfqv-2685", "ts": 1793455960567, "type": "xss", "severity": "ELEVATED", "src": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "115.190.185.243" }, "dst": { "city": "Santiago", "country": "Chile", "cc": "CL", "lat": -33.45, "lng": -70.67, "ip": "210.75.19.173" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 61764, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "anonymous", "mitre": "T1059.007", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwhdf73-2681", "ts": 1793455959855, "type": "phishing", "severity": "LOW", "src": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "48.197.68.172" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "94.59.244.230" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 22974, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS16276 OVH" }, { "id": "atk-mvwhdeh7-2674", "ts": 1793455958923, "type": "botnet", "severity": "LOW", "src": { "city": "Lima", "country": "Peru", "cc": "PE", "lat": -12.05, "lng": -77.04, "ip": "91.255.134.230" }, "dst": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "135.186.238.82" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 48355, "intensity": 9, "intel": false, "actor": "fin7", "campaign": "OPERATION IRON DRIFT", "mitre": "T1543", "srcAsn": "AS12389 ROSTELECOM", "chain": { "id": "chain-mvwhddk3-18", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvwhde7u-2672", "ts": 1793455958586, "type": "malware", "severity": "ELEVATED", "src": { "city": "Nairobi", "country": "Kenya", "cc": "KE", "lat": -1.29, "lng": 36.82, "ip": "43.38.187.41" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "167.185.219.7" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 7383, "intensity": 7, "intel": false, "mitre": "T1204", "srcAsn": "AS2914 NTT" }, { "id": "atk-mvwhdd2g-2663", "ts": 1793455957096, "type": "xss", "severity": "LOW", "src": { "city": "Baghdad", "country": "Iraq", "cc": "IQ", "lat": 33.31, "lng": 44.37, "ip": "103.226.6.46" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "71.7.221.210" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 23084, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1059.007", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwhdc4g-2655", "ts": 1793455955872, "type": "ddos", "severity": "HIGH", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "90.38.115.82" }, "dst": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "192.194.208.199" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 42934, "intensity": 10, "intel": false, "actor": "anonymous", "mitre": "T1498", "srcAsn": "AS2516 KDDI" }, { "id": "atk-mvwhdb9j-2652", "ts": 1793455954759, "type": "zeroday", "severity": "LOW", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "77.156.26.124" }, "dst": { "city": "Auckland", "country": "New Zealand", "cc": "NZ", "lat": -36.85, "lng": 174.76, "ip": "54.126.15.85" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 14303, "intensity": 8, "intel": false, "actor": "apt29", "campaign": "OPERATION NEON VECTOR", "mitre": "T1190", "srcAsn": "AS3320 DEUTSCHE-TELEKOM", "chain": { "id": "chain-mvwhdb35-17", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 2, "total": 3 } }, { "id": "atk-mvwhd9um-2641", "ts": 1793455952926, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "47.209.181.228" }, "dst": { "city": "Buenos Aires", "country": "Argentina", "cc": "AR", "lat": -34.6, "lng": -58.38, "ip": "45.38.131.184" }, "port": 443, "service": "HTTPS", "protocol": "UDP", "packets": 31864, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS3462 CHUNGHWA" }, { "id": "atk-mvwhd8ep-2630", "ts": 1793455951057, "type": "malware", "severity": "ELEVATED", "src": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "194.135.177.102" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "209.47.39.99" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 88315, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvwhcz1m-2610", "ts": 1793455938922, "type": "ransomware", "severity": "HIGH", "src": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "47.12.104.124" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "42.113.37.243" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 10131, "intensity": 10, "intel": false, "actor": "lockbit", "mitre": "T1486", "srcAsn": "AS3257 GTT" }, { "id": "atk-mvwhcy2f-2608", "ts": 1793455937655, "type": "mitm", "severity": "HIGH", "src": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "79.37.116.205" }, "dst": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "200.10.209.80" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 66545, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION VELVET HARBOR", "mitre": "T1041", "srcAsn": "AS3269 TELECOM-ITALIA", "chain": { "id": "chain-mvwhcxey-14", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvwhcxje-2604", "ts": 1793455936970, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "23.230.120.198" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "95.183.135.100" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 24502, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS2914 NTT" }, { "id": "atk-mvwhcwtq-2598", "ts": 1793455936046, "type": "xss", "severity": "LOW", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "182.31.40.136" }, "dst": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "159.78.221.13" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 78850, "intensity": 10, "intel": false, "mitre": "T1059.007", "srcAsn": "AS4760 PCCW" }, { "id": "atk-mvwhct58-2580", "ts": 1793455931276, "type": "bruteforce", "severity": "LOW", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "58.229.120.12" }, "dst": { "city": "Stockholm", "country": "Sweden", "cc": "SE", "lat": 59.33, "lng": 18.07, "ip": "61.158.182.213" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 62064, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwhckyt-2564", "ts": 1793455920677, "type": "ransomware", "severity": "HIGH", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "130.66.9.201" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "97.213.231.113" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 55421, "intensity": 10, "intel": false, "actor": "apt28", "campaign": "OPERATION STATIC SPIRE", "mitre": "T1486", "srcAsn": "AS174 COGENT", "chain": { "id": "chain-mvwhcict-11", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwhckf0-2563", "ts": 1793455919964, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "223.16.18.56" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "103.222.101.115" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 64891, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwhcfm1-2554", "ts": 1793455913737, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "118.145.238.115" }, "dst": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "193.157.28.115" }, "port": 3306, "service": "MySQL", "protocol": "UDP", "packets": 63608, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwhc6a3-2537", "ts": 1793455901643, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "152.12.137.211" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "148.92.89.25" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 35308, "intensity": 10, "intel": false, "actor": "apt28", "campaign": "OPERATION SILENT LANTERN", "srcAsn": "AS9808 CHINA-MOBILE", "chain": { "id": "chain-mvwhc6a3-10", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvwhc2o2-2528", "ts": 1793455896962, "type": "bruteforce", "severity": "LOW", "src": { "city": "Melbourne", "country": "Australia", "cc": "AU", "lat": -37.81, "lng": 144.96, "ip": "133.79.134.163" }, "dst": { "city": "Santiago", "country": "Chile", "cc": "CL", "lat": -33.45, "lng": -70.67, "ip": "145.130.184.229" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 19550, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS55836 RELIANCE-JIO" }, { "id": "atk-mvwhbw27-2501", "ts": 1793455888399, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Melbourne", "country": "Australia", "cc": "AU", "lat": -37.81, "lng": 144.96, "ip": "63.171.19.60" }, "dst": { "city": "Atlanta", "country": "United States", "cc": "US", "lat": 33.75, "lng": -84.39, "ip": "134.95.40.157" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 51818, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION NEON FORGE", "mitre": "T1543", "srcAsn": "AS16509 AMAZON-02", "chain": { "id": "chain-mvwhbsx9-8", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvwhbbcf-2462", "ts": 1793455861551, "type": "botnet", "severity": "HIGH", "src": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "160.169.154.207" }, "dst": { "city": "Manila", "country": "Philippines", "cc": "PH", "lat": 14.6, "lng": 120.98, "ip": "25.111.39.183" }, "port": 80, "service": "HTTP", "protocol": "UDP", "packets": 75327, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1071", "srcAsn": "AS9318 SK-BROADBAND", "ioc": "sp28ct5-vorti-biz-zulak-murro.pages.dev", "feed": "OpenPhish" }, { "id": "atk-mvwhb37q-2428", "ts": 1793455851014, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "91.46.188.93" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "180.159.181.211" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 3742, "intensity": 10, "intel": false, "actor": "apt37", "mitre": "T1566", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwhaqvo-2405", "ts": 1793455835028, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "43.167.120.112" }, "dst": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "84.191.50.215" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 78842, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS3215 ORANGE" }, { "id": "atk-mvwhafz5-2376", "ts": 1793455820897, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "1.54.51.88" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "203.0.207.165" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 30617, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwhabot-2353", "ts": 1793455815341, "type": "botnet", "severity": "HIGH", "src": { "city": "Dhaka", "country": "Bangladesh", "cc": "BD", "lat": 23.81, "lng": 90.41, "ip": "87.129.10.154" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "85.91.146.169" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 74207, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1071", "srcAsn": "AS3209 VODAFONE" }, { "id": "atk-mvwhab3b-2348", "ts": 1793455814567, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "62.146.103.115" }, "dst": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "14.125.118.68" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 12441, "intensity": 6, "intel": false, "actor": "apt41", "mitre": "T1190", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwhaamf-2345", "ts": 1793455813959, "type": "botnet", "severity": "HIGH", "src": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "196.105.59.224" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "37.176.7.221" }, "port": 443, "service": "HTTPS", "protocol": "ICMP", "packets": 34235, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION STATIC LANTERN", "mitre": "T1543", "srcAsn": "AS1299 TELIA", "chain": { "id": "chain-mvwha9sx-0", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvwha9sx-2338", "ts": 1793455812897, "type": "bruteforce", "severity": "CRITICAL", "src": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "151.39.33.184" }, "dst": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "197.198.163.35" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 28246, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION STATIC LANTERN", "srcAsn": "AS9808 CHINA-MOBILE", "chain": { "id": "chain-mvwha9sx-0", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 1, "total": 4 } }, { "id": "atk-mvwha4y6-2325", "ts": 1793455806606, "type": "ransomware", "severity": "HIGH", "src": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "44.101.247.76" }, "dst": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "22.25.162.76" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 51073, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS9498 AIRTEL" }, { "id": "atk-mvwha4h7-2324", "ts": 1793455805995, "type": "ddos", "severity": "HIGH", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "144.126.9.245" }, "dst": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "57.240.46.94" }, "port": 5432, "service": "PostgreSQL", "protocol": "UDP", "packets": 87184, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvwha3f0-2322", "ts": 1793455804620, "type": "ddos", "severity": "ELEVATED", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "115.73.221.4" }, "dst": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "74.73.206.25" }, "port": 53, "service": "DNS", "protocol": "UDP", "packets": 72811, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "anonymous", "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwha309-2321", "ts": 1793455804089, "type": "phishing", "severity": "LOW", "src": { "city": "Lahore", "country": "Pakistan", "cc": "PK", "lat": 31.55, "lng": 74.34, "ip": "34.101.27.93" }, "dst": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "55.77.80.7" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 4545, "intensity": 7, "intel": false, "actor": "fin7", "mitre": "T1566", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwh9y00-2317", "ts": 1793455797600, "type": "malware", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "23.140.105.180" }, "dst": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "136.250.50.148" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 10557, "intensity": 6, "intel": false, "actor": "darkhotel", "mitre": "T1204", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwh9x9p-2316", "ts": 1793455796653, "type": "xss", "severity": "ELEVATED", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "204.174.107.125" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "121.132.135.21" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 34958, "intensity": 5, "intel": false, "mitre": "T1059.007", "srcAsn": "AS3257 GTT" }, { "id": "atk-mvwh9bbk-2268", "ts": 1793455768208, "type": "botnet", "severity": "HIGH", "src": { "city": "Manila", "country": "Philippines", "cc": "PH", "lat": 14.6, "lng": 120.98, "ip": "140.26.172.160" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "136.235.16.170" }, "port": 8080, "service": "HTTP-ALT", "protocol": "UDP", "packets": 37951, "intensity": 6, "intel": false, "actor": "apt41", "mitre": "T1071", "srcAsn": "AS2497 IIJ" }, { "id": "atk-mvwh98r7-2247", "ts": 1793455764883, "type": "ransomware", "severity": "HIGH", "src": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "103.255.73.229" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "3.252.121.238" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 85843, "intensity": 9, "intel": true, "malware": "Bruteforce Source", "actor": "lockbit", "mitre": "T1486", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwh98nm-2246", "ts": 1793455764754, "type": "malware", "severity": "ELEVATED", "src": { "city": "Baghdad", "country": "Iraq", "cc": "IQ", "lat": 33.31, "lng": 44.37, "ip": "161.133.119.81" }, "dst": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "203.207.198.48" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 15497, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1204", "srcAsn": "AS22773 COX", "ioc": "stevoadels.github.io", "feed": "OpenPhish" }, { "id": "atk-mvwh96le-2230", "ts": 1793455762082, "type": "phishing", "severity": "LOW", "src": { "city": "Dhaka", "country": "Bangladesh", "cc": "BD", "lat": 23.81, "lng": 90.41, "ip": "207.86.211.157" }, "dst": { "city": "Madrid", "country": "Spain", "cc": "ES", "lat": 40.42, "lng": -3.7, "ip": "31.23.186.4" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 77331, "intensity": 9, "intel": false, "actor": "apt28", "mitre": "T1566", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwh8vym-2198", "ts": 1793455748302, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "1.216.152.174" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "80.33.104.142" }, "port": 53, "service": "DNS", "protocol": "UDP", "packets": 67857, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh8ulm-2187", "ts": 1793455746538, "type": "phishing", "severity": "ELEVATED", "src": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "85.163.83.67" }, "dst": { "city": "Buenos Aires", "country": "Argentina", "cc": "AR", "lat": -34.6, "lng": -58.38, "ip": "179.152.55.148" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 8648, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1566", "srcAsn": "AS39386 STC" }, { "id": "atk-mvwh8uh1-2186", "ts": 1793455746373, "type": "ddos", "severity": "HIGH", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "119.152.233.144" }, "dst": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "94.110.113.12" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 61812, "intensity": 3, "intel": true, "malware": "Bruteforce Source", "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh8ozb-2154", "ts": 1793455739255, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Manila", "country": "Philippines", "cc": "PH", "lat": 14.6, "lng": 120.98, "ip": "83.65.178.96" }, "dst": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "16.172.145.166" }, "port": 80, "service": "HTTP", "protocol": "UDP", "packets": 4509, "intensity": 7, "intel": false, "mitre": "T1071", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwh8mg4-2137", "ts": 1793455735972, "type": "malware", "severity": "HIGH", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "188.160.248.165" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "57.108.16.239" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 64983, "intensity": 2, "intel": false, "mitre": "T1204", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwh8hhn-2122", "ts": 1793455729547, "type": "ddos", "severity": "HIGH", "src": { "city": "Casablanca", "country": "Morocco", "cc": "MA", "lat": 33.57, "lng": -7.59, "ip": "90.101.170.98" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "176.172.212.204" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 6978, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION NEON VIGIL", "mitre": "T1498", "srcAsn": "AS9498 AIRTEL", "chain": { "id": "chain-mvwh8hah-37", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwh8ffk-2104", "ts": 1793455726880, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "211.219.169.96" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "27.13.204.71" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 40579, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION STATIC VECTOR", "srcAsn": "AS4760 PCCW", "chain": { "id": "chain-mvwh8ffk-36", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvwh8e96-2094", "ts": 1793455725354, "type": "malware", "severity": "HIGH", "src": { "city": "Ho Chi Minh City", "country": "Vietnam", "cc": "VN", "lat": 10.82, "lng": 106.63, "ip": "117.247.17.88" }, "dst": { "city": "Caracas", "country": "Venezuela", "cc": "VE", "lat": 10.49, "lng": -66.88, "ip": "177.70.183.148" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 79288, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1204", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh8bon-2088", "ts": 1793455722023, "type": "ddos", "severity": "CRITICAL", "src": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "141.29.49.82" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "169.64.45.74" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 62213, "intensity": 8, "intel": false, "mitre": "T1498", "srcAsn": "AS2497 IIJ" }, { "id": "atk-mvwh8as1-2082", "ts": 1793455720849, "type": "bruteforce", "severity": "LOW", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "216.221.208.179" }, "dst": { "city": "Ho Chi Minh City", "country": "Vietnam", "cc": "VN", "lat": 10.82, "lng": 106.63, "ip": "26.124.146.221" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 69032, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS701 VERIZON" }, { "id": "atk-mvwh89m0-2072", "ts": 1793455719336, "type": "bruteforce", "severity": "LOW", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "58.216.52.121" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "155.244.13.222" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 18447, "intensity": 7, "intel": true, "malware": "Phishing Kit", "actor": "fin7", "mitre": "T1110", "srcAsn": "AS4837 CHINA-UNICOM", "ioc": "austraco-2026--d44087341.replit.app", "feed": "OpenPhish" }, { "id": "atk-mvwh85c2-2057", "ts": 1793455713794, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Lahore", "country": "Pakistan", "cc": "PK", "lat": 31.55, "lng": 74.34, "ip": "215.15.100.134" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "81.127.52.184" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 7865, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS63949 LINODE" }, { "id": "atk-mvwh7vvk-2030", "ts": 1793455701536, "type": "botnet", "severity": "HIGH", "src": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "161.176.145.53" }, "dst": { "city": "Rio de Janeiro", "country": "Brazil", "cc": "BR", "lat": -22.91, "lng": -43.17, "ip": "53.93.92.61" }, "port": 5900, "service": "VNC", "protocol": "UDP", "packets": 72067, "intensity": 8, "intel": true, "malware": "Phishing Kit", "actor": "apt41", "mitre": "T1071", "srcAsn": "AS22773 COX", "ioc": "austraco-2026--d44087341.replit.app", "feed": "OpenPhish" }, { "id": "atk-mvwh7vsu-2029", "ts": 1793455701438, "type": "xss", "severity": "ELEVATED", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "102.64.42.170" }, "dst": { "city": "Warsaw", "country": "Poland", "cc": "PL", "lat": 52.23, "lng": 21.01, "ip": "199.160.167.72" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 81713, "intensity": 6, "intel": true, "malware": "Bruteforce Source", "mitre": "T1059.007", "srcAsn": "AS14061 DIGITALOCEAN", "feed": "Blocklist" }, { "id": "atk-mvwh7tec-2013", "ts": 1793455698324, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "59.79.208.157" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "154.73.175.88" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 15986, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh7tap-2012", "ts": 1793455698193, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "37.58.222.148" }, "dst": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "191.14.131.224" }, "port": 5432, "service": "PostgreSQL", "protocol": "ICMP", "packets": 31989, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1498", "srcAsn": "AS3215 ORANGE", "ioc": "dhfgy6hkqlo-tjrmllos-6w3s5b-dhf77w.pages.dev", "feed": "OpenPhish" }, { "id": "atk-mvwh7r56-1995", "ts": 1793455695402, "type": "zeroday", "severity": "CRITICAL", "src": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "27.73.72.238" }, "dst": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "18.242.240.47" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 30593, "intensity": 7, "intel": false, "actor": "fin7", "campaign": "OPERATION SILENT VIGIL", "mitre": "T1190", "srcAsn": "AS4134 CHINANET", "chain": { "id": "chain-mvwh7qyk-31", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 2, "total": 4 } }, { "id": "atk-mvwh7poa-1984", "ts": 1793455693498, "type": "ddos", "severity": "HIGH", "src": { "city": "Baghdad", "country": "Iraq", "cc": "IQ", "lat": 33.31, "lng": 44.37, "ip": "206.212.252.197" }, "dst": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "83.119.88.116" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 46995, "intensity": 6, "intel": false, "mitre": "T1498", "srcAsn": "AS7018 AT&T" }, { "id": "atk-mvwh7kvp-1973", "ts": 1793455687285, "type": "phishing", "severity": "LOW", "src": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "20.210.21.2" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "21.138.123.8" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 35111, "intensity": 10, "intel": false, "actor": "scattered", "mitre": "T1566", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwh7hhw-1966", "ts": 1793455682900, "type": "botnet", "severity": "HIGH", "src": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "178.114.183.93" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "129.148.12.21" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 13419, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1071", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvwh7fv6-1952", "ts": 1793455680786, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "94.71.68.167" }, "dst": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "99.91.42.198" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 52897, "intensity": 7, "intel": false, "actor": "apt37", "mitre": "T1566", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwh7ei3-1941", "ts": 1793455679019, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "1.85.42.195" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "135.107.97.187" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 54382, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "darkhotel", "mitre": "T1557", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh7ed2-1940", "ts": 1793455678838, "type": "phishing", "severity": "ELEVATED", "src": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "103.68.41.143" }, "dst": { "city": "Stockholm", "country": "Sweden", "cc": "SE", "lat": 59.33, "lng": 18.07, "ip": "23.55.39.33" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 55747, "intensity": 8, "intel": false, "actor": "scattered", "mitre": "T1566", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwh7e84-1939", "ts": 1793455678660, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "223.224.220.198" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "106.42.187.14" }, "port": 6379, "service": "Redis", "protocol": "UDP", "packets": 15559, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh78qf-1925", "ts": 1793455671543, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "183.24.147.241" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "179.21.43.142" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 3049, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS3462 CHUNGHWA" }, { "id": "atk-mvwh76f1-1921", "ts": 1793455668541, "type": "zeroday", "severity": "LOW", "src": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "171.250.245.12" }, "dst": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "78.219.219.141" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 66562, "intensity": 5, "intel": false, "actor": "fin7", "campaign": "OPERATION STATIC LANTERN", "mitre": "T1190", "srcAsn": "AS4837 CHINA-UNICOM", "chain": { "id": "chain-mvwh744v-27", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 2, "total": 4 } }, { "id": "atk-mvwh75q7-1920", "ts": 1793455667647, "type": "malware", "severity": "ELEVATED", "src": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "25.124.68.252" }, "dst": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "119.67.198.48" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 34077, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS2516 KDDI" }, { "id": "atk-mvwh6x1v-1890", "ts": 1793455656403, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Auckland", "country": "New Zealand", "cc": "NZ", "lat": -36.85, "lng": 174.76, "ip": "194.50.170.123" }, "dst": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "115.24.238.142" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 71539, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvwh6uu6-1883", "ts": 1793455653534, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "87.94.201.118" }, "dst": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "201.111.218.115" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 21563, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS3209 VODAFONE" }, { "id": "atk-mvwh6u4o-1877", "ts": 1793455652616, "type": "malware", "severity": "ELEVATED", "src": { "city": "Cairo", "country": "Egypt", "cc": "EG", "lat": 30.04, "lng": 31.24, "ip": "190.204.12.168" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "171.139.119.103" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 16426, "intensity": 9, "intel": false, "mitre": "T1204", "srcAsn": "AS7473 SINGTEL" }, { "id": "atk-mvwh6t0j-1867", "ts": 1793455651171, "type": "phishing", "severity": "ELEVATED", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "28.7.23.237" }, "dst": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "203.14.149.98" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 31495, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS9498 AIRTEL" }, { "id": "atk-mvwh6f9b-1832", "ts": 1793455633343, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Kuala Lumpur", "country": "Malaysia", "cc": "MY", "lat": 3.14, "lng": 101.69, "ip": "70.200.189.250" }, "dst": { "city": "Madrid", "country": "Spain", "cc": "ES", "lat": 40.42, "lng": -3.7, "ip": "114.90.94.44" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 66636, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvwh6d10-1828", "ts": 1793455630452, "type": "malware", "severity": "ELEVATED", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "135.90.56.94" }, "dst": { "city": "Warsaw", "country": "Poland", "cc": "PL", "lat": 52.23, "lng": 21.01, "ip": "13.167.69.231" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 20155, "intensity": 2, "intel": false, "mitre": "T1204", "srcAsn": "AS3462 CHUNGHWA" }, { "id": "atk-mvwh65aw-1813", "ts": 1793455620440, "type": "sqli", "severity": "HIGH", "src": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "150.206.202.32" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "115.179.18.47" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 33624, "intensity": 2, "intel": false, "mitre": "T1190", "srcAsn": "AS9808 CHINA-MOBILE" }, { "id": "atk-mvwh62md-1808", "ts": 1793455616965, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "140.108.129.92" }, "dst": { "city": "Madrid", "country": "Spain", "cc": "ES", "lat": 40.42, "lng": -3.7, "ip": "123.240.218.24" }, "port": 3306, "service": "MySQL", "protocol": "UDP", "packets": 45239, "intensity": 10, "intel": false, "actor": "apt37", "campaign": "OPERATION IRON VIGIL", "mitre": "T1486", "srcAsn": "AS2497 IIJ", "chain": { "id": "chain-mvwh61lk-22", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwh5zyn-1798", "ts": 1793455613519, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "194.85.111.35" }, "dst": { "city": "Seattle", "country": "United States", "cc": "US", "lat": 47.61, "lng": -122.33, "ip": "102.210.215.237" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 24356, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1190", "srcAsn": "AS1299 TELIA", "ioc": "mydpd.nlvtq.help", "feed": "OpenPhish" }, { "id": "atk-mvwh5vys-1769", "ts": 1793455608340, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "106.75.227.248" }, "dst": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "108.212.135.240" }, "port": 445, "service": "SMB", "protocol": "ICMP", "packets": 63288, "intensity": 7, "intel": true, "malware": "Bruteforce Source", "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwh5tz6-1765", "ts": 1793455605762, "type": "ransomware", "severity": "HIGH", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "20.122.25.197" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "145.47.69.126" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 81430, "intensity": 10, "intel": false, "actor": "lazarus", "mitre": "T1486", "srcAsn": "AS16276 OVH" }, { "id": "atk-mvwh5pf1-1757", "ts": 1793455599853, "type": "sqli", "severity": "HIGH", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "32.85.171.38" }, "dst": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "14.186.161.181" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 55691, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvwh5htr-1743", "ts": 1793455590015, "type": "xss", "severity": "LOW", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "46.59.34.252" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "74.68.91.158" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 2058, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1059.007", "srcAsn": "AS3215 ORANGE", "ioc": "sp24ct-faro-biz-zelun-navi.pages.dev", "feed": "OpenPhish" }, { "id": "atk-mvwh5cxn-1735", "ts": 1793455583675, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "112.161.26.125" }, "dst": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "96.69.127.143" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 13112, "intensity": 2, "intel": true, "malware": "Bruteforce Source", "actor": "fin7", "mitre": "T1110", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh4x7e-1694", "ts": 1793455563290, "type": "sqli", "severity": "HIGH", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "110.165.17.127" }, "dst": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "188.136.228.117" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 86076, "intensity": 8, "intel": true, "malware": "Bruteforce Source", "mitre": "T1190", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh4r9z-1683", "ts": 1793455555607, "type": "mitm", "severity": "LOW", "src": { "city": "Karachi", "country": "Pakistan", "cc": "PK", "lat": 24.86, "lng": 67.01, "ip": "93.134.69.32" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "44.36.195.4" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 81705, "intensity": 10, "intel": false, "actor": "apt28", "mitre": "T1557", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwh4pke-1678", "ts": 1793455553390, "type": "phishing", "severity": "LOW", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "25.110.185.206" }, "dst": { "city": "Riyadh", "country": "Saudi Arabia", "cc": "SA", "lat": 24.71, "lng": 46.68, "ip": "188.155.51.216" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 13939, "intensity": 6, "intel": false, "actor": "fin7", "mitre": "T1566", "srcAsn": "AS55836 RELIANCE-JIO" }, { "id": "atk-mvwh4lzc-1650", "ts": 1793455548744, "type": "bruteforce", "severity": "LOW", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "209.208.83.5" }, "dst": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "179.244.249.125" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 27839, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwh4kht-1643", "ts": 1793455546817, "type": "zeroday", "severity": "HIGH", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "50.242.234.122" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "126.249.66.153" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 66933, "intensity": 10, "intel": false, "mitre": "T1203", "srcAsn": "AS39386 STC" }, { "id": "atk-mvwh4jtp-1642", "ts": 1793455545949, "type": "bruteforce", "severity": "LOW", "src": { "city": "Baghdad", "country": "Iraq", "cc": "IQ", "lat": 33.31, "lng": 44.37, "ip": "71.235.121.99" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "5.193.43.172" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 42306, "intensity": 7, "intel": false, "mitre": "T1110", "srcAsn": "AS20473 VULTR" }, { "id": "atk-mvwh4bw1-1627", "ts": 1793455535665, "type": "botnet", "severity": "HIGH", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "93.238.41.206" }, "dst": { "city": "Tashkent", "country": "Uzbekistan", "cc": "UZ", "lat": 41.3, "lng": 69.24, "ip": "191.139.234.224" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 59406, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION FROZEN FORGE", "mitre": "T1041", "srcAsn": "AS12389 ROSTELECOM", "chain": { "id": "chain-mvwh49ru-17", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvwh49a3-1615", "ts": 1793455532283, "type": "sqli", "severity": "ELEVATED", "src": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "101.36.116.216" }, "dst": { "city": "Casablanca", "country": "Morocco", "cc": "MA", "lat": 33.57, "lng": -7.59, "ip": "191.207.209.46" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 11544, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "apt37", "campaign": "OPERATION SILENT FRACTURE", "mitre": "T1190", "srcAsn": "AS4134 CHINANET", "chain": { "id": "chain-mvwh48w7-16", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 2, "total": 3 }, "feed": "Blocklist" }, { "id": "atk-mvwh48w7-1612", "ts": 1793455531783, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "215.156.208.13" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "148.123.2.242" }, "port": 25, "service": "SMTP", "protocol": "UDP", "packets": 53092, "intensity": 9, "intel": false, "actor": "apt37", "campaign": "OPERATION SILENT FRACTURE", "srcAsn": "AS3462 CHUNGHWA", "chain": { "id": "chain-mvwh48w7-16", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvwh46x0-1596", "ts": 1793455529220, "type": "phishing", "severity": "LOW", "src": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "79.254.122.43" }, "dst": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "189.173.232.67" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 65176, "intensity": 6, "intel": false, "mitre": "T1566", "srcAsn": "AS3269 TELECOM-ITALIA" }, { "id": "atk-mvwh457z-1583", "ts": 1793455527023, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Kuala Lumpur", "country": "Malaysia", "cc": "MY", "lat": 3.14, "lng": 101.69, "ip": "6.113.51.95" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "33.173.141.173" }, "port": 21, "service": "FTP", "protocol": "ICMP", "packets": 35488, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS55836 RELIANCE-JIO" }, { "id": "atk-mvwh44lx-1578", "ts": 1793455526229, "type": "botnet", "severity": "LOW", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "97.45.143.139" }, "dst": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "75.60.78.7" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 11234, "intensity": 3, "intel": false, "actor": "fin7", "campaign": "OPERATION SHADOW HARBOR", "mitre": "T1543", "srcAsn": "AS4837 CHINA-UNICOM", "chain": { "id": "chain-mvwh449x-14", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvwh449x-1575", "ts": 1793455525797, "type": "bruteforce", "severity": "LOW", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "35.62.101.72" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "110.248.116.83" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 1168, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION SHADOW HARBOR", "srcAsn": "AS63949 LINODE", "chain": { "id": "chain-mvwh449x-14", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 1, "total": 4 } }, { "id": "atk-mvwh442y-1573", "ts": 1793455525546, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "3.158.144.61" }, "dst": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "29.186.32.77" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 9116, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1071", "srcAsn": "AS39386 STC" }, { "id": "atk-mvwh3yv0-1552", "ts": 1793455518780, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "136.124.197.154" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "143.128.246.228" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 52576, "intensity": 7, "intel": false, "mitre": "T1566", "srcAsn": "AS132203 TENCENT" }, { "id": "atk-mvwh3yg5-1548", "ts": 1793455518245, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "4.44.81.6" }, "dst": { "city": "Addis Ababa", "country": "Ethiopia", "cc": "ET", "lat": 9.02, "lng": 38.75, "ip": "32.152.172.129" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 88398, "intensity": 10, "intel": false, "actor": "anonymous", "mitre": "T1498", "srcAsn": "AS16276 OVH" }, { "id": "atk-mvwh3xkh-1541", "ts": 1793455517105, "type": "mitm", "severity": "HIGH", "src": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "136.141.21.27" }, "dst": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "19.35.219.252" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 83203, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION BROKEN SPIRE", "mitre": "T1041", "srcAsn": "AS5384 ETISALAT", "chain": { "id": "chain-mvwh3wgm-12", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvwh3wk0-1533", "ts": 1793455515792, "type": "sqli", "severity": "HIGH", "src": { "city": "Tashkent", "country": "Uzbekistan", "cc": "UZ", "lat": 41.3, "lng": 69.24, "ip": "130.23.255.13" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "8.206.165.242" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 51304, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1190", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwh3tvi-1527", "ts": 1793455512318, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "161.184.71.215" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "81.80.58.172" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 49686, "intensity": 8, "intel": false, "mitre": "T1110", "srcAsn": "AS22773 COX" }, { "id": "atk-mvwh3ph8-1519", "ts": 1793455506620, "type": "sqli", "severity": "HIGH", "src": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "29.5.162.214" }, "dst": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "219.51.25.83" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 87680, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwh3p2k-1518", "ts": 1793455506092, "type": "bruteforce", "severity": "LOW", "src": { "city": "Ho Chi Minh City", "country": "Vietnam", "cc": "VN", "lat": 10.82, "lng": 106.63, "ip": "120.141.21.219" }, "dst": { "city": "Atlanta", "country": "United States", "cc": "US", "lat": 33.75, "lng": -84.39, "ip": "41.203.213.53" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 68712, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "fin7", "mitre": "T1110", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh3ll0-1512", "ts": 1793455501572, "type": "zeroday", "severity": "HIGH", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "29.93.19.23" }, "dst": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "202.139.48.76" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 50902, "intensity": 4, "intel": false, "mitre": "T1203", "srcAsn": "AS132203 TENCENT" }, { "id": "atk-mvwh3l1p-1507", "ts": 1793455500877, "type": "malware", "severity": "HIGH", "src": { "city": "Casablanca", "country": "Morocco", "cc": "MA", "lat": 33.57, "lng": -7.59, "ip": "124.174.19.195" }, "dst": { "city": "Montreal", "country": "Canada", "cc": "CA", "lat": 45.5, "lng": -73.57, "ip": "220.142.42.3" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 43884, "intensity": 9, "intel": true, "malware": "Bruteforce Source", "mitre": "T1204", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh3k7z-1501", "ts": 1793455499807, "type": "mitm", "severity": "ELEVATED", "src": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "102.209.76.137" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "78.21.135.196" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 962, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1557", "srcAsn": "AS3215 ORANGE", "feed": "Blocklist" }, { "id": "atk-mvwh3ix9-1491", "ts": 1793455498125, "type": "xss", "severity": "ELEVATED", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "45.28.77.196" }, "dst": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "96.241.57.127" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 16445, "intensity": 10, "intel": false, "mitre": "T1059.007", "srcAsn": "AS14061 DIGITALOCEAN" }, { "id": "atk-mvwh37zt-1465", "ts": 1793455483961, "type": "ddos", "severity": "HIGH", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "181.187.174.96" }, "dst": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "182.129.169.130" }, "port": 21, "service": "FTP", "protocol": "ICMP", "packets": 61573, "intensity": 3, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwh306t-1448", "ts": 1793455473845, "type": "sqli", "severity": "HIGH", "src": { "city": "Manila", "country": "Philippines", "cc": "PH", "lat": 14.6, "lng": 120.98, "ip": "80.32.146.245" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "12.150.252.175" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 45012, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS2856 BRITISH-TELECOM" }, { "id": "atk-mvwh2w18-1438", "ts": 1793455468460, "type": "phishing", "severity": "LOW", "src": { "city": "Buenos Aires", "country": "Argentina", "cc": "AR", "lat": -34.6, "lng": -58.38, "ip": "104.77.118.154" }, "dst": { "city": "Addis Ababa", "country": "Ethiopia", "cc": "ET", "lat": 9.02, "lng": 38.75, "ip": "52.118.1.157" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 86020, "intensity": 10, "intel": false, "actor": "apt28", "mitre": "T1566", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwh2ta5-1432", "ts": 1793455464893, "type": "mitm", "severity": "CRITICAL", "src": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "193.222.63.107" }, "dst": { "city": "Manchester", "country": "United Kingdom", "cc": "GB", "lat": 53.48, "lng": -2.24, "ip": "217.91.120.85" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 3161, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION CRIMSON LANTERN", "mitre": "T1041", "srcAsn": "AS6849 UKRTELECOM", "chain": { "id": "chain-mvwh2sjf-8", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvwh2rws-1423", "ts": 1793455463116, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "191.135.109.6" }, "dst": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "92.36.15.95" }, "port": 445, "service": "SMB", "protocol": "UDP", "packets": 61688, "intensity": 2, "intel": false, "actor": "lazarus", "mitre": "T1071", "srcAsn": "AS16509 AMAZON-02" }, { "id": "atk-mvwh2rny-1421", "ts": 1793455462798, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "12.148.112.51" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "46.27.153.124" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 66738, "intensity": 2, "intel": false, "mitre": "T1566", "srcAsn": "AS9318 SK-BROADBAND" }, { "id": "atk-mvwh2rkz-1420", "ts": 1793455462691, "type": "ddos", "severity": "ELEVATED", "src": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "217.2.74.170" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "163.44.144.41" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 36842, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS12479 ORANGE-ES" }, { "id": "atk-mvwh2ntw-1405", "ts": 1793455457828, "type": "phishing", "severity": "ELEVATED", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "106.155.166.69" }, "dst": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "153.208.146.178" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 84878, "intensity": 5, "intel": false, "mitre": "T1566", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwh2llu-1400", "ts": 1793455454946, "type": "botnet", "severity": "LOW", "src": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "163.231.243.168" }, "dst": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "130.160.121.60" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 4610, "intensity": 5, "intel": false, "actor": "fin7", "campaign": "OPERATION BROKEN VECTOR", "mitre": "T1071", "srcAsn": "AS4760 PCCW", "chain": { "id": "chain-mvwh2jzt-7", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 2, "total": 3 } }, { "id": "atk-mvwh2hmf-1393", "ts": 1793455449783, "type": "zeroday", "severity": "CRITICAL", "src": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "204.100.2.41" }, "dst": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "163.225.223.151" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 42790, "intensity": 6, "intel": false, "mitre": "T1203", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwh27b3-1373", "ts": 1793455436415, "type": "malware", "severity": "HIGH", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "47.234.108.214" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "74.144.168.182" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 68502, "intensity": 5, "intel": false, "mitre": "T1204", "srcAsn": "AS20473 VULTR" }, { "id": "atk-mvwh20nl-1361", "ts": 1793455427793, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "222.157.148.12" }, "dst": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "135.165.202.48" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 63150, "intensity": 6, "intel": false, "mitre": "T1566", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh1ww1-1354", "ts": 1793455422913, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "221.0.134.209" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "160.213.201.24" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 86339, "intensity": 5, "intel": false, "mitre": "T1557", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh1s86-1329", "ts": 1793455416870, "type": "phishing", "severity": "ELEVATED", "src": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "66.207.63.153" }, "dst": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "162.70.234.84" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 21331, "intensity": 5, "intel": false, "mitre": "T1566", "srcAsn": "AS7018 AT&T" }, { "id": "atk-mvwh1ooj-1320", "ts": 1793455412275, "type": "zeroday", "severity": "CRITICAL", "src": { "city": "Buenos Aires", "country": "Argentina", "cc": "AR", "lat": -34.6, "lng": -58.38, "ip": "112.196.167.55" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "206.214.135.114" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 40962, "intensity": 10, "intel": false, "actor": "equation", "mitre": "T1203", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh1o7g-1316", "ts": 1793455411660, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "181.133.224.57" }, "dst": { "city": "Madrid", "country": "Spain", "cc": "ES", "lat": 40.42, "lng": -3.7, "ip": "13.59.163.17" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 45686, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION SHADOW LANTERN", "mitre": "T1071", "srcAsn": "AS9121 TURK-TELEKOM", "chain": { "id": "chain-mvwh1o2o-4", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 2, "total": 3 } }, { "id": "atk-mvwh1nwc-1314", "ts": 1793455411260, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "64.118.193.9" }, "dst": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "62.94.233.210" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 4209, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS3257 GTT" }, { "id": "atk-mvwh1in7-1294", "ts": 1793455404451, "type": "bruteforce", "severity": "LOW", "src": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "39.4.199.106" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "212.33.61.160" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 82216, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh1dy2-1275", "ts": 1793455398362, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "43.110.62.243" }, "dst": { "city": "Perth", "country": "Australia", "cc": "AU", "lat": -31.95, "lng": 115.86, "ip": "118.247.56.193" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 65079, "intensity": 10, "intel": false, "actor": "apt28", "campaign": "OPERATION BROKEN ECHO", "mitre": "T1190", "srcAsn": "AS30844 LIQUID-TELECOM", "chain": { "id": "chain-mvwh1c7p-2", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 2, "total": 3 } }, { "id": "atk-mvwh1bco-1252", "ts": 1793455395000, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "181.29.14.104" }, "dst": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "173.140.96.155" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 57245, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh142x-1234", "ts": 1793455385577, "type": "ddos", "severity": "HIGH", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "94.71.176.141" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "190.174.179.119" }, "port": 80, "service": "HTTP", "protocol": "UDP", "packets": 39235, "intensity": 9, "intel": false, "mitre": "T1498", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwh12lw-1223", "ts": 1793455383668, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "153.95.213.28" }, "dst": { "city": "Seattle", "country": "United States", "cc": "US", "lat": 47.61, "lng": -122.33, "ip": "200.23.145.225" }, "port": 3389, "service": "RDP", "protocol": "UDP", "packets": 48171, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS9808 CHINA-MOBILE" }, { "id": "atk-mvwh0qpm-711", "ts": 1793455368250, "type": "sqli", "severity": "HIGH", "src": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "120.132.26.92" }, "dst": { "city": "Warsaw", "country": "Poland", "cc": "PL", "lat": 52.23, "lng": 21.01, "ip": "93.99.222.125" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 73726, "intensity": 6, "intel": false, "mitre": "T1190", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwh0od4-691", "ts": 1793455365208, "type": "bruteforce", "severity": "LOW", "src": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "17.171.137.17" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "38.91.122.239" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 51146, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS16509 AMAZON-02" }, { "id": "atk-mvwh0nsc-686", "ts": 1793455364460, "type": "botnet", "severity": "HIGH", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "111.70.49.188" }, "dst": { "city": "Buenos Aires", "country": "Argentina", "cc": "AR", "lat": -34.6, "lng": -58.38, "ip": "115.21.235.190" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 35393, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1071", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwh0hxg-670", "ts": 1793455356868, "type": "botnet", "severity": "CRITICAL", "src": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "28.210.100.232" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "18.71.106.242" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 80907, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION BROKEN FRACTURE", "mitre": "T1543", "srcAsn": "AS13238 YANDEX", "chain": { "id": "chain-mvwh0f7g-3", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvwh0hg4-669", "ts": 1793455356244, "type": "phishing", "severity": "LOW", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "12.62.180.226" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "201.144.163.3" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 54454, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS9498 AIRTEL" }, { "id": "atk-mvwh0f7g-665", "ts": 1793455353340, "type": "bruteforce", "severity": "LOW", "src": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "151.49.145.141" }, "dst": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "4.1.46.185" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 57597, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION BROKEN FRACTURE", "srcAsn": "AS9808 CHINA-MOBILE", "chain": { "id": "chain-mvwh0f7g-3", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 1, "total": 4 } }, { "id": "atk-mvwh0eww-1176", "ts": 1793455352960, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "148.106.139.30" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "209.250.224.95" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 35830, "intensity": 8, "intel": false, "actor": "apt41", "mitre": "T1190", "srcAsn": "AS701 VERIZON" }, { "id": "atk-mvwh0dr6-659", "ts": 1793455351458, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Cairo", "country": "Egypt", "cc": "EG", "lat": 30.04, "lng": 31.24, "ip": "13.4.58.128" }, "dst": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "179.230.139.172" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 78254, "intensity": 4, "intel": false, "actor": "apt28", "mitre": "T1566", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwh0d1r-652", "ts": 1793455350543, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "191.193.239.60" }, "dst": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "169.241.204.90" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 63614, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvwh0cgj-647", "ts": 1793455349779, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "8.142.222.230" }, "dst": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "99.32.69.1" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 770, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwh0bme-639", "ts": 1793455348694, "type": "ransomware", "severity": "HIGH", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "52.237.2.160" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "93.44.26.100" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 27487, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvwh0bes-637", "ts": 1793455348420, "type": "malware", "severity": "HIGH", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "112.240.108.64" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "75.69.99.187" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 39342, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1204", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwh0aih-1158", "ts": 1793455347257, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "29.170.230.134" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "100.183.66.64" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 81830, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS16509 AMAZON-02" }, { "id": "atk-mvwh09cn-628", "ts": 1793455345751, "type": "zeroday", "severity": "HIGH", "src": { "city": "Riyadh", "country": "Saudi Arabia", "cc": "SA", "lat": 24.71, "lng": 46.68, "ip": "77.14.16.39" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "81.73.61.200" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 76640, "intensity": 10, "intel": false, "mitre": "T1203", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwh08an-1138", "ts": 1793455344383, "type": "mitm", "severity": "LOW", "src": { "city": "Rio de Janeiro", "country": "Brazil", "cc": "BR", "lat": -22.91, "lng": -43.17, "ip": "32.254.54.222" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "170.210.113.209" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 50828, "intensity": 10, "intel": false, "mitre": "T1557", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwh085k-625", "ts": 1793455344200, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "146.67.214.156" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "173.17.20.167" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 73473, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1190", "srcAsn": "AS701 VERIZON" }, { "id": "atk-mvwh05r1-604", "ts": 1793455341085, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "26.157.223.247" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "187.161.1.38" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 61031, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION OBSIDIAN DRIFT", "mitre": "T1498", "srcAsn": "AS9121 TURK-TELEKOM", "chain": { "id": "chain-mvwh04ct-1", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwh05li-603", "ts": 1793455340886, "type": "ddos", "severity": "HIGH", "src": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "77.222.211.189" }, "dst": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "92.206.142.6" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 5245, "intensity": 9, "intel": false, "actor": "fin7", "campaign": "OPERATION CRIMSON FORGE", "mitre": "T1498", "srcAsn": "AS3320 DEUTSCHE-TELEKOM", "chain": { "id": "chain-mvwh052o-2", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwh055b-600", "ts": 1793455340303, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "213.228.78.100" }, "dst": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "166.250.138.192" }, "port": 5900, "service": "VNC", "protocol": "UDP", "packets": 58716, "intensity": 2, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS3215 ORANGE" }, { "id": "atk-mvwh04ct-594", "ts": 1793455339277, "type": "bruteforce", "severity": "LOW", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "74.58.61.161" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "105.64.69.244" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 57211, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION OBSIDIAN DRIFT", "srcAsn": "AS16276 OVH", "chain": { "id": "chain-mvwh04ct-1", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvwh00tw-572", "ts": 1793455334708, "type": "ddos", "severity": "HIGH", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "10.199.242.196" }, "dst": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "28.31.128.127" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 54695, "intensity": 10, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS5384 ETISALAT" }, { "id": "atk-mvwgzy7j-566", "ts": 1793455331311, "type": "bruteforce", "severity": "LOW", "src": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "109.160.32.44" }, "dst": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "55.217.240.244" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 76417, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1110", "srcAsn": "AS30844 LIQUID-TELECOM", "feed": "Blocklist" }, { "id": "atk-mvwgzv9p-559", "ts": 1793455327501, "type": "malware", "severity": "ELEVATED", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "75.180.22.131" }, "dst": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "46.142.18.231" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 10658, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS3462 CHUNGHWA" }, { "id": "atk-mvwgzujg-553", "ts": 1793455326556, "type": "phishing", "severity": "LOW", "src": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "59.140.105.220" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "16.105.249.91" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 76141, "intensity": 10, "intel": false, "actor": "apt37", "mitre": "T1566", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgztvt-547", "ts": 1793455325705, "type": "xss", "severity": "ELEVATED", "src": { "city": "Buenos Aires", "country": "Argentina", "cc": "AR", "lat": -34.6, "lng": -58.38, "ip": "152.131.73.46" }, "dst": { "city": "Riyadh", "country": "Saudi Arabia", "cc": "SA", "lat": 24.71, "lng": 46.68, "ip": "187.202.5.44" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 34514, "intensity": 10, "intel": false, "mitre": "T1059.007", "srcAsn": "AS9808 CHINA-MOBILE" }, { "id": "atk-mvwgztr8-546", "ts": 1793455325540, "type": "sqli", "severity": "HIGH", "src": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "49.171.230.210" }, "dst": { "city": "Denver", "country": "United States", "cc": "US", "lat": 39.74, "lng": -104.99, "ip": "120.94.121.14" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 47852, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1190", "srcAsn": "AS3215 ORANGE" }, { "id": "atk-mvwgzrel-1095", "ts": 1793455322493, "type": "malware", "severity": "HIGH", "src": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "115.118.224.177" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "134.134.126.252" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 13599, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwgzr9m-533", "ts": 1793455322314, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Atlanta", "country": "United States", "cc": "US", "lat": 33.75, "lng": -84.39, "ip": "113.161.79.218" }, "dst": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "15.30.45.96" }, "port": 3306, "service": "MySQL", "protocol": "ICMP", "packets": 65838, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwgzqrt-1089", "ts": 1793455321673, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Baghdad", "country": "Iraq", "cc": "IQ", "lat": 33.31, "lng": 44.37, "ip": "47.76.249.173" }, "dst": { "city": "Melbourne", "country": "Australia", "cc": "AU", "lat": -37.81, "lng": 144.96, "ip": "162.41.254.238" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 63751, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS3257 GTT" }, { "id": "atk-mvwgzqlg-528", "ts": 1793455321444, "type": "bruteforce", "severity": "LOW", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "152.220.129.137" }, "dst": { "city": "Baghdad", "country": "Iraq", "cc": "IQ", "lat": 33.31, "lng": 44.37, "ip": "26.170.97.204" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 33524, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1110", "srcAsn": "AS9808 CHINA-MOBILE", "ioc": "liveverific.fwh.is", "feed": "OpenPhish" }, { "id": "atk-mvwgzqjk-1087", "ts": 1793455321376, "type": "bruteforce", "severity": "LOW", "src": { "city": "Madrid", "country": "Spain", "cc": "ES", "lat": 40.42, "lng": -3.7, "ip": "147.49.174.216" }, "dst": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "96.202.4.202" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 10728, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS701 VERIZON" }, { "id": "atk-mvwgzq84-1085", "ts": 1793455320964, "type": "malware", "severity": "HIGH", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "94.213.13.139" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "89.178.239.169" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 85305, "intensity": 9, "intel": false, "mitre": "T1204", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwgzpm1-1080", "ts": 1793455320169, "type": "ransomware", "severity": "HIGH", "src": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "3.38.0.179" }, "dst": { "city": "Montreal", "country": "Canada", "cc": "CA", "lat": 45.5, "lng": -73.57, "ip": "153.9.177.112" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 85195, "intensity": 7, "intel": false, "mitre": "T1486", "srcAsn": "AS55836 RELIANCE-JIO" }, { "id": "atk-mvwgzpgp-1078", "ts": 1793455319977, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Boston", "country": "United States", "cc": "US", "lat": 42.36, "lng": -71.06, "ip": "99.93.135.223" }, "dst": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "222.170.227.157" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 69753, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION NEON TEMPEST", "mitre": "T1498", "srcAsn": "AS5384 ETISALAT", "chain": { "id": "chain-mvwgzp7k-43", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwgzo94-1070", "ts": 1793455318408, "type": "zeroday", "severity": "CRITICAL", "src": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "206.48.227.171" }, "dst": { "city": "Accra", "country": "Ghana", "cc": "GH", "lat": 5.6, "lng": -0.19, "ip": "68.31.202.161" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 30609, "intensity": 7, "intel": false, "actor": "fin7", "campaign": "OPERATION BROKEN CASCADE", "mitre": "T1190", "srcAsn": "AS1299 TELIA", "chain": { "id": "chain-mvwgzhe4-40", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 2, "total": 4 } }, { "id": "atk-mvwgzmnx-498", "ts": 1793455316349, "type": "mitm", "severity": "LOW", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "67.192.143.248" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "192.193.177.240" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 58800, "intensity": 10, "intel": true, "malware": "Phishing Kit", "actor": "equation", "mitre": "T1557", "srcAsn": "AS174 COGENT", "ioc": "fb-free.shop", "feed": "OpenPhish" }, { "id": "atk-mvwgzme9-495", "ts": 1793455316001, "type": "malware", "severity": "ELEVATED", "src": { "city": "Dhaka", "country": "Bangladesh", "cc": "BD", "lat": 23.81, "lng": 90.41, "ip": "200.56.111.172" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "39.130.228.227" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 32361, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS20473 VULTR" }, { "id": "atk-mvwgzkrj-481", "ts": 1793455313887, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "74.77.69.36" }, "dst": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "222.185.190.211" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 49392, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS55836 RELIANCE-JIO" }, { "id": "atk-mvwgzkkd-479", "ts": 1793455313629, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "193.57.66.158" }, "dst": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "202.132.148.205" }, "port": 8080, "service": "HTTP-ALT", "protocol": "UDP", "packets": 31170, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS6849 UKRTELECOM" }, { "id": "atk-mvwgzggr-1054", "ts": 1793455308315, "type": "bruteforce", "severity": "LOW", "src": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "199.170.90.118" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "12.159.16.86" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 88029, "intensity": 6, "intel": false, "mitre": "T1110", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwgzg7r-1052", "ts": 1793455307991, "type": "botnet", "severity": "LOW", "src": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "189.61.78.178" }, "dst": { "city": "Baghdad", "country": "Iraq", "cc": "IQ", "lat": 33.31, "lng": 44.37, "ip": "113.128.4.120" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 41089, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION SHADOW VECTOR", "mitre": "T1543", "srcAsn": "AS7473 SINGTEL", "chain": { "id": "chain-mvwgzfru-39", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvwgzf4l-1043", "ts": 1793455306581, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "5.195.2.41" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "182.142.56.113" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 48815, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS7018 AT&T" }, { "id": "atk-mvwgzekq-1038", "ts": 1793455305866, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "103.98.176.164" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "74.54.185.245" }, "port": 6379, "service": "Redis", "protocol": "UDP", "packets": 69924, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1071", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgz5ez-1005", "ts": 1793455293995, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Santiago", "country": "Chile", "cc": "CL", "lat": -33.45, "lng": -70.67, "ip": "193.246.101.72" }, "dst": { "city": "Perth", "country": "Australia", "cc": "AU", "lat": -31.95, "lng": 115.86, "ip": "51.17.253.141" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 29586, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS6849 UKRTELECOM" }, { "id": "atk-mvwgz53i-1002", "ts": 1793455293582, "type": "xss", "severity": "ELEVATED", "src": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "142.44.118.6" }, "dst": { "city": "Dhaka", "country": "Bangladesh", "cc": "BD", "lat": 23.81, "lng": 90.41, "ip": "156.216.228.28" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 82832, "intensity": 10, "intel": false, "mitre": "T1059.007", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwgz01h-981", "ts": 1793455287029, "type": "botnet", "severity": "HIGH", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "40.244.101.214" }, "dst": { "city": "Seattle", "country": "United States", "cc": "US", "lat": 47.61, "lng": -122.33, "ip": "91.217.251.72" }, "port": 445, "service": "SMB", "protocol": "UDP", "packets": 49584, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgz01g-403", "ts": 1793455287028, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Seattle", "country": "United States", "cc": "US", "lat": 47.61, "lng": -122.33, "ip": "89.57.220.77" }, "dst": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "220.13.142.58" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 28440, "intensity": 4, "intel": false, "mitre": "T1566", "srcAsn": "AS8359 MTS" }, { "id": "atk-mvwgyyea-388", "ts": 1793455284898, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "196.75.112.254" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "203.14.249.52" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 25413, "intensity": 8, "intel": false, "mitre": "T1557", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvwgywau-378", "ts": 1793455282182, "type": "mitm", "severity": "LOW", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "106.117.255.153" }, "dst": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "9.150.62.158" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 15432, "intensity": 5, "intel": true, "malware": "Bruteforce Source", "mitre": "T1557", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgytxo-965", "ts": 1793455279116, "type": "bruteforce", "severity": "LOW", "src": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "156.237.40.142" }, "dst": { "city": "Perth", "country": "Australia", "cc": "AU", "lat": -31.95, "lng": 115.86, "ip": "76.175.237.38" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 51927, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS7018 AT&T" }, { "id": "atk-mvwgytm0-962", "ts": 1793455278696, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "7.17.47.171" }, "dst": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "141.0.240.137" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 50095, "intensity": 4, "intel": false, "mitre": "T1498", "srcAsn": "AS3352 TELEFONICA" }, { "id": "atk-mvwgyt5f-958", "ts": 1793455278099, "type": "ddos", "severity": "HIGH", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "103.47.145.27" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "80.31.155.199" }, "port": 6379, "service": "Redis", "protocol": "ICMP", "packets": 9786, "intensity": 5, "intel": true, "malware": "Bruteforce Source", "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgyqgq-938", "ts": 1793455274618, "type": "bruteforce", "severity": "LOW", "src": { "city": "Rio de Janeiro", "country": "Brazil", "cc": "BR", "lat": -22.91, "lng": -43.17, "ip": "52.236.65.60" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "168.66.142.235" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 71132, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS55836 RELIANCE-JIO" }, { "id": "atk-mvwgymy0-928", "ts": 1793455270056, "type": "ransomware", "severity": "HIGH", "src": { "city": "Stockholm", "country": "Sweden", "cc": "SE", "lat": 59.33, "lng": 18.07, "ip": "104.33.237.140" }, "dst": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "204.216.212.142" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 71027, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION OBSIDIAN FORGE", "mitre": "T1486", "srcAsn": "AS3257 GTT", "chain": { "id": "chain-mvwgym7b-32", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwgym67-326", "ts": 1793455269055, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Karachi", "country": "Pakistan", "cc": "PK", "lat": 24.86, "lng": 67.01, "ip": "56.105.235.89" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "77.195.223.212" }, "port": 22, "service": "SSH", "protocol": "ICMP", "packets": 5721, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS24940 HETZNER" }, { "id": "atk-mvwgylon-917", "ts": 1793455268423, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "86.251.118.135" }, "dst": { "city": "Atlanta", "country": "United States", "cc": "US", "lat": 33.75, "lng": -84.39, "ip": "17.228.35.38" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 63304, "intensity": 6, "intel": false, "mitre": "T1557", "srcAsn": "AS63949 LINODE" }, { "id": "atk-mvwgyeh4-299", "ts": 1793455259080, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "84.141.152.39" }, "dst": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "139.68.254.201" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 5562, "intensity": 7, "intel": false, "actor": "fin7", "campaign": "OPERATION VELVET VIGIL", "mitre": "T1071", "srcAsn": "AS20473 VULTR", "chain": { "id": "chain-mvwgye4q-9", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 2, "total": 3 } }, { "id": "atk-mvwgy9q6-875", "ts": 1793455252926, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "77.196.63.63" }, "dst": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "185.157.21.19" }, "port": 5432, "service": "PostgreSQL", "protocol": "UDP", "packets": 53111, "intensity": 10, "intel": false, "actor": "anonymous", "mitre": "T1498", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwgy41q-261", "ts": 1793455245566, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "117.211.77.86" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "133.111.96.200" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 67143, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "fin7", "campaign": "OPERATION IRON FRACTURE", "mitre": "T1543", "srcAsn": "AS4134 CHINANET", "chain": { "id": "chain-mvwgy3lv-8", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 }, "feed": "Blocklist" }, { "id": "atk-mvwgy1z2-847", "ts": 1793455242878, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "133.85.218.15" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "37.34.231.149" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 8167, "intensity": 6, "intel": false, "mitre": "T1557", "srcAsn": "AS3352 TELEFONICA" }, { "id": "atk-mvwgxz5m-234", "ts": 1793455239226, "type": "sqli", "severity": "HIGH", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "181.60.81.140" }, "dst": { "city": "Stockholm", "country": "Sweden", "cc": "SE", "lat": 59.33, "lng": 18.07, "ip": "123.106.9.128" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 68771, "intensity": 10, "intel": false, "actor": "apt41", "mitre": "T1190", "srcAsn": "AS3257 GTT" }, { "id": "atk-mvwgxyzx-232", "ts": 1793455239021, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "107.156.183.107" }, "dst": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "26.138.133.166" }, "port": 5900, "service": "VNC", "protocol": "ICMP", "packets": 53540, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION HOLLOW ECHO", "mitre": "T1498", "srcAsn": "AS9318 SK-BROADBAND", "chain": { "id": "chain-mvwgxyde-7", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwgxyde-227", "ts": 1793455238210, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "55.116.109.155" }, "dst": { "city": "Melbourne", "country": "Australia", "cc": "AU", "lat": -37.81, "lng": 144.96, "ip": "143.252.52.245" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 26793, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION HOLLOW ECHO", "srcAsn": "AS6849 UKRTELECOM", "chain": { "id": "chain-mvwgxyde-7", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvwgxu5j-831", "ts": 1793455232743, "type": "sqli", "severity": "HIGH", "src": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "155.224.112.110" }, "dst": { "city": "Montreal", "country": "Canada", "cc": "CA", "lat": 45.5, "lng": -73.57, "ip": "204.6.7.98" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 61032, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS7018 AT&T" }, { "id": "atk-mvwgxt4i-829", "ts": 1793455231410, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "53.68.152.243" }, "dst": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "115.188.196.79" }, "port": 6379, "service": "Redis", "protocol": "ICMP", "packets": 19435, "intensity": 7, "intel": false, "mitre": "T1498", "srcAsn": "AS55836 RELIANCE-JIO" }, { "id": "atk-mvwgxic8-184", "ts": 1793455217432, "type": "ddos", "severity": "HIGH", "src": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "210.190.125.229" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "180.68.80.174" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 80441, "intensity": 10, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4760 PCCW" }, { "id": "atk-mvwgxgs6-804", "ts": 1793455215414, "type": "botnet", "severity": "ELEVATED", "src": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "1.166.217.118" }, "dst": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "147.167.246.137" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 82980, "intensity": 9, "intel": false, "mitre": "T1071", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgxgn0-171", "ts": 1793455215228, "type": "bruteforce", "severity": "LOW", "src": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "163.90.7.212" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "154.139.95.149" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 69261, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION SHADOW SPIRE", "srcAsn": "AS4760 PCCW", "chain": { "id": "chain-mvwgxgn0-3", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvwgxgbx-169", "ts": 1793455214829, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "116.232.22.43" }, "dst": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "128.110.147.76" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 12150, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1557", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgxg5b-803", "ts": 1793455214591, "type": "phishing", "severity": "HIGH", "src": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "102.92.191.50" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "43.214.34.58" }, "port": 22, "service": "SSH", "protocol": "ICMP", "packets": 42014, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION BROKEN FRACTURE", "srcAsn": "AS24940 HETZNER", "chain": { "id": "chain-mvwgxg5b-28", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 1, "total": 4 } }, { "id": "atk-mvwgxelz-798", "ts": 1793455212599, "type": "bruteforce", "severity": "LOW", "src": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "77.140.10.216" }, "dst": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "31.69.112.168" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 18132, "intensity": 9, "intel": false, "mitre": "T1110", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwgxc31-149", "ts": 1793455209325, "type": "phishing", "severity": "LOW", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "104.159.46.115" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "202.105.199.145" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 39062, "intensity": 9, "intel": false, "mitre": "T1566", "srcAsn": "AS16276 OVH" }, { "id": "atk-mvwgxbxt-148", "ts": 1793455209137, "type": "sqli", "severity": "HIGH", "src": { "city": "Warsaw", "country": "Poland", "cc": "PL", "lat": 52.23, "lng": 21.01, "ip": "136.110.87.161" }, "dst": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "156.71.13.221" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 66888, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgxaoh-779", "ts": 1793455207505, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "185.106.241.120" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "105.81.55.214" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 20848, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwgx8ja-139", "ts": 1793455204726, "type": "phishing", "severity": "LOW", "src": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "197.232.14.53" }, "dst": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "9.131.96.152" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 23055, "intensity": 6, "intel": false, "mitre": "T1566", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwgx708-772", "ts": 1793455202744, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Casablanca", "country": "Morocco", "cc": "MA", "lat": 33.57, "lng": -7.59, "ip": "73.166.221.234" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "68.14.74.239" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 51614, "intensity": 3, "intel": false, "mitre": "T1498", "srcAsn": "AS63949 LINODE" }, { "id": "atk-mvwgx4t2-768", "ts": 1793455199894, "type": "bruteforce", "severity": "LOW", "src": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "30.222.116.239" }, "dst": { "city": "Stockholm", "country": "Sweden", "cc": "SE", "lat": 59.33, "lng": 18.07, "ip": "73.67.136.169" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 76287, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS63949 LINODE" }, { "id": "atk-mvwgwyzx-758", "ts": 1793455192365, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "18.149.24.188" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "151.208.208.4" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 59339, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwgwy9q-104", "ts": 1793455191422, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "64.81.49.220" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "97.47.1.41" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 33749, "intensity": 7, "intel": false, "mitre": "T1486", "srcAsn": "AS9498 AIRTEL" }, { "id": "atk-mvwgwxq2-755", "ts": 1793455190714, "type": "sqli", "severity": "HIGH", "src": { "city": "Kuala Lumpur", "country": "Malaysia", "cc": "MY", "lat": 3.14, "lng": 101.69, "ip": "103.55.144.78" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "66.45.183.115" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 48023, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1190", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgwu1l-738", "ts": 1793455185945, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "48.244.61.53" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "70.203.45.71" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 85275, "intensity": 10, "intel": false, "actor": "lockbit", "mitre": "T1486", "srcAsn": "AS39386 STC" }, { "id": "atk-mvwgwtoj-735", "ts": 1793455185475, "type": "malware", "severity": "HIGH", "src": { "city": "Addis Ababa", "country": "Ethiopia", "cc": "ET", "lat": 9.02, "lng": 38.75, "ip": "188.180.210.211" }, "dst": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "26.153.17.235" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 72585, "intensity": 10, "intel": false, "actor": "apt37", "mitre": "T1204", "srcAsn": "AS3352 TELEFONICA" }, { "id": "atk-mvwgwthp-82", "ts": 1793455185229, "type": "sqli", "severity": "HIGH", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "21.55.145.132" }, "dst": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "175.108.141.53" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 3774, "intensity": 7, "intel": false, "mitre": "T1190", "srcAsn": "AS16276 OVH" }, { "id": "atk-mvwgwrz9-78", "ts": 1793455183269, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "149.47.95.116" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "122.157.5.74" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 5283, "intensity": 10, "intel": false, "actor": "apt37", "mitre": "T1566", "srcAsn": "AS3352 TELEFONICA" }, { "id": "atk-mvwgwre5-77", "ts": 1793455182509, "type": "phishing", "severity": "LOW", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "76.28.209.136" }, "dst": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "32.247.184.68" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 40639, "intensity": 7, "intel": false, "actor": "fin7", "mitre": "T1566", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwgwo2z-716", "ts": 1793455178219, "type": "ransomware", "severity": "HIGH", "src": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "72.240.238.27" }, "dst": { "city": "Dhaka", "country": "Bangladesh", "cc": "BD", "lat": 23.81, "lng": 90.41, "ip": "2.201.222.74" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 60344, "intensity": 10, "intel": false, "actor": "apt28", "campaign": "OPERATION VELVET LANTERN", "mitre": "T1486", "srcAsn": "AS37963 ALIBABA", "chain": { "id": "chain-mvwgwmeo-24", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwgwndk-715", "ts": 1793455177304, "type": "sqli", "severity": "HIGH", "src": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "128.76.169.39" }, "dst": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "204.63.53.156" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 54645, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwgwmn9-55", "ts": 1793455176357, "type": "phishing", "severity": "LOW", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "123.160.108.145" }, "dst": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "217.2.80.27" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 49829, "intensity": 6, "intel": false, "mitre": "T1566", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwgwl7y-47", "ts": 1793455174510, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "71.242.172.160" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "13.108.243.208" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 49257, "intensity": 4, "intel": false, "mitre": "T1190", "srcAsn": "AS9121 TURK-TELEKOM" }, { "id": "atk-mvwgwksu-44", "ts": 1793455173966, "type": "sqli", "severity": "HIGH", "src": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "213.15.176.77" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "17.68.242.23" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 17731, "intensity": 7, "intel": false, "mitre": "T1190", "srcAsn": "AS3215 ORANGE" }, { "id": "atk-mvwgwk60-39", "ts": 1793455173144, "type": "phishing", "severity": "LOW", "src": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "56.107.132.149" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "50.169.59.46" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 59498, "intensity": 10, "intel": false, "actor": "scattered", "mitre": "T1566", "srcAsn": "AS6849 UKRTELECOM" }, { "id": "atk-mvwgwgyt-692", "ts": 1793455168997, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "2.181.67.58" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "159.40.71.64" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 44765, "intensity": 10, "intel": false, "actor": "apt28", "mitre": "T1566", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwgwfls-680", "ts": 1793455167232, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "157.152.55.218" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "115.39.163.96" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 75827, "intensity": 7, "intel": false, "mitre": "T1486", "srcAsn": "AS7018 AT&T" }, { "id": "atk-mvwgwd44-671", "ts": 1793455164004, "type": "sqli", "severity": "HIGH", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "36.158.30.46" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "165.186.62.197" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 34478, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgwby2-20", "ts": 1793455162490, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "18.1.254.132" }, "dst": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "149.57.175.96" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 45693, "intensity": 6, "intel": false, "actor": "apt29", "mitre": "T1566", "srcAsn": "AS9121 TURK-TELEKOM" }, { "id": "atk-mvwgw7cp-11", "ts": 1793455156537, "type": "botnet", "severity": "HIGH", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "97.153.138.192" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "101.24.62.63" }, "port": 21, "service": "FTP", "protocol": "UDP", "packets": 84328, "intensity": 6, "intel": false, "actor": "lazarus", "mitre": "T1071", "srcAsn": "AS14061 DIGITALOCEAN" }, { "id": "atk-mvwgw5vh-650", "ts": 1793455154621, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "82.192.79.242" }, "dst": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "146.38.2.225" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 73598, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS3269 TELECOM-ITALIA" }, { "id": "atk-mvwgw5pf-649", "ts": 1793455154403, "type": "malware", "severity": "ELEVATED", "src": { "city": "Madrid", "country": "Spain", "cc": "ES", "lat": 40.42, "lng": -3.7, "ip": "175.149.143.94" }, "dst": { "city": "Montreal", "country": "Canada", "cc": "CA", "lat": 45.5, "lng": -73.57, "ip": "49.16.137.20" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 75348, "intensity": 9, "intel": false, "actor": "lazarus", "mitre": "T1204", "srcAsn": "AS17557 PTCL" }, { "id": "atk-mvwgw2dw-628", "ts": 1793455150100, "type": "mitm", "severity": "LOW", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "103.28.54.180" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "26.82.253.113" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 74210, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1557", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgvzeu-619", "ts": 1793455146246, "type": "botnet", "severity": "HIGH", "src": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "29.216.169.63" }, "dst": { "city": "Seattle", "country": "United States", "cc": "US", "lat": 47.61, "lng": -122.33, "ip": "176.75.168.167" }, "port": 25, "service": "SMTP", "protocol": "UDP", "packets": 52075, "intensity": 2, "intel": false, "mitre": "T1071", "srcAsn": "AS37963 ALIBABA" }, { "id": "atk-mvwgvxza-607", "ts": 1793455144390, "type": "phishing", "severity": "LOW", "src": { "city": "Cairo", "country": "Egypt", "cc": "EG", "lat": 30.04, "lng": 31.24, "ip": "56.24.117.155" }, "dst": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "211.240.112.186" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 2957, "intensity": 5, "intel": false, "mitre": "T1566", "srcAsn": "AS13238 YANDEX" }, { "id": "atk-mvwgvxe7-603", "ts": 1793455143631, "type": "ransomware", "severity": "HIGH", "src": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "131.0.173.253" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "48.52.251.51" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 58199, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwgvwvd-601", "ts": 1793455142953, "type": "botnet", "severity": "HIGH", "src": { "city": "Ho Chi Minh City", "country": "Vietnam", "cc": "VN", "lat": 10.82, "lng": 106.63, "ip": "198.49.95.60" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "86.233.65.19" }, "port": 80, "service": "HTTP", "protocol": "UDP", "packets": 33089, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwgvugc-596", "ts": 1793455139820, "type": "xss", "severity": "LOW", "src": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "164.164.51.149" }, "dst": { "city": "Tashkent", "country": "Uzbekistan", "cc": "UZ", "lat": 41.3, "lng": 69.24, "ip": "42.103.194.85" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 72242, "intensity": 7, "intel": false, "mitre": "T1059.007", "srcAsn": "AS4760 PCCW" }, { "id": "atk-mvwgvpkv-573", "ts": 1793455133503, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "110.255.233.92" }, "dst": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "11.119.79.195" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 11197, "intensity": 4, "intel": false, "actor": "apt29", "mitre": "T1557", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgvnlr-563", "ts": 1793455130943, "type": "zeroday", "severity": "HIGH", "src": { "city": "Auckland", "country": "New Zealand", "cc": "NZ", "lat": -36.85, "lng": 174.76, "ip": "160.13.176.192" }, "dst": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "96.60.219.241" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 40378, "intensity": 10, "intel": false, "mitre": "T1203", "srcAsn": "AS39386 STC" }, { "id": "atk-mvwgvlko-559", "ts": 1793455128312, "type": "zeroday", "severity": "HIGH", "src": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "201.27.12.79" }, "dst": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "117.107.175.249" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 52479, "intensity": 10, "intel": false, "actor": "sandworm", "mitre": "T1203", "srcAsn": "AS14061 DIGITALOCEAN" }, { "id": "atk-mvwgvl3d-558", "ts": 1793455127689, "type": "malware", "severity": "HIGH", "src": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "159.135.227.227" }, "dst": { "city": "Warsaw", "country": "Poland", "cc": "PL", "lat": 52.23, "lng": 21.01, "ip": "177.131.106.228" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 46014, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS132203 TENCENT" }, { "id": "atk-mvwgvhlv-535", "ts": 1793455123171, "type": "bruteforce", "severity": "LOW", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "207.77.138.163" }, "dst": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "146.200.145.209" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 87301, "intensity": 9, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwgvfwb-529", "ts": 1793455120955, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Denver", "country": "United States", "cc": "US", "lat": 39.74, "lng": -104.99, "ip": "169.184.82.251" }, "dst": { "city": "Seoul", "country": "South Korea", "cc": "KR", "lat": 37.57, "lng": 126.98, "ip": "133.104.31.43" }, "port": 443, "service": "HTTPS", "protocol": "UDP", "packets": 29569, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM", "ioc": "sp30ct10-korvemi-biz-zunaro.pages.dev", "feed": "OpenPhish" }, { "id": "atk-mvwgve8b-525", "ts": 1793455118795, "type": "xss", "severity": "LOW", "src": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "65.175.120.95" }, "dst": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "39.161.76.33" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 43044, "intensity": 10, "intel": false, "mitre": "T1059.007", "srcAsn": "AS6849 UKRTELECOM" }, { "id": "atk-mvwgv9zw-515", "ts": 1793455113308, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "143.151.72.88" }, "dst": { "city": "Almaty", "country": "Kazakhstan", "cc": "KZ", "lat": 43.24, "lng": 76.89, "ip": "76.134.158.141" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 89910, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION HOLLOW MIRAGE", "mitre": "T1498", "srcAsn": "AS7922 COMCAST", "chain": { "id": "chain-mvwgv9n7-18", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvwgv9n7-512", "ts": 1793455112851, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "115.76.205.143" }, "dst": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "128.240.145.68" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 56150, "intensity": 10, "intel": true, "malware": "Phishing Kit", "actor": "fin7", "campaign": "OPERATION HOLLOW MIRAGE", "srcAsn": "AS4837 CHINA-UNICOM", "chain": { "id": "chain-mvwgv9n7-18", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 1, "total": 3 }, "ioc": "jane-moves-fitted-growth.trycloudflare.com", "feed": "OpenPhish" }, { "id": "atk-mvwgv7v7-496", "ts": 1793455110547, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "198.23.75.56" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "33.64.88.120" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 20335, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwgv6fz-485", "ts": 1793455108703, "type": "bruteforce", "severity": "LOW", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "58.119.66.157" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "118.125.69.52" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 33898, "intensity": 7, "intel": false, "mitre": "T1110", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwgv5t5-480", "ts": 1793455107881, "type": "bruteforce", "severity": "LOW", "src": { "city": "Nairobi", "country": "Kenya", "cc": "KE", "lat": -1.29, "lng": 36.82, "ip": "124.104.210.19" }, "dst": { "city": "Ho Chi Minh City", "country": "Vietnam", "cc": "VN", "lat": 10.82, "lng": 106.63, "ip": "206.51.149.76" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 86510, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgv2pa-457", "ts": 1793455103854, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "87.168.203.200" }, "dst": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "27.85.182.81" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 43230, "intensity": 7, "intel": false, "mitre": "T1190", "srcAsn": "AS3209 VODAFONE" }, { "id": "atk-mvwguzpm-442", "ts": 1793455099978, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "116.9.64.26" }, "dst": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "68.150.52.248" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 52053, "intensity": 8, "intel": false, "mitre": "T1190", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwguswz-425", "ts": 1793455091171, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "3.188.50.253" }, "dst": { "city": "Stockholm", "country": "Sweden", "cc": "SE", "lat": 59.33, "lng": 18.07, "ip": "123.163.21.149" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 29890, "intensity": 8, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvwguqbh-404", "ts": 1793455087805, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "40.68.30.180" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "51.67.122.90" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 79587, "intensity": 9, "intel": false, "mitre": "T1071", "srcAsn": "AS30844 LIQUID-TELECOM" }, { "id": "atk-mvwguq2t-402", "ts": 1793455087493, "type": "bruteforce", "severity": "LOW", "src": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "102.64.35.158" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "75.83.36.177" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 84687, "intensity": 2, "intel": true, "malware": "Bruteforce Source", "mitre": "T1110", "srcAsn": "AS6849 UKRTELECOM", "feed": "Blocklist" }, { "id": "atk-mvwgunsm-398", "ts": 1793455084534, "type": "ddos", "severity": "HIGH", "src": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "51.65.75.51" }, "dst": { "city": "Jakarta", "country": "Indonesia", "cc": "ID", "lat": -6.21, "lng": 106.85, "ip": "30.213.103.6" }, "port": 21, "service": "FTP", "protocol": "ICMP", "packets": 59990, "intensity": 4, "intel": false, "mitre": "T1498", "srcAsn": "AS9808 CHINA-MOBILE" }, { "id": "atk-mvwgulvp-394", "ts": 1793455082053, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "153.205.42.57" }, "dst": { "city": "Melbourne", "country": "Australia", "cc": "AU", "lat": -37.81, "lng": 144.96, "ip": "111.100.110.194" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 4042, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS9808 CHINA-MOBILE" }, { "id": "atk-mvwguike-386", "ts": 1793455077758, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "138.40.2.220" }, "dst": { "city": "Lima", "country": "Peru", "cc": "PE", "lat": -12.05, "lng": -77.04, "ip": "82.236.196.40" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 56282, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS2914 NTT" }, { "id": "atk-mvwguhoo-378", "ts": 1793455076616, "type": "malware", "severity": "HIGH", "src": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "38.53.11.20" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "191.245.244.121" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 63543, "intensity": 10, "intel": false, "actor": "sandworm", "mitre": "T1204", "srcAsn": "AS2516 KDDI" }, { "id": "atk-mvwgug7i-365", "ts": 1793455074702, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "179.172.104.235" }, "dst": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "51.95.45.229" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 6191, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1110", "srcAsn": "AS2516 KDDI" }, { "id": "atk-mvwguc8k-353", "ts": 1793455069556, "type": "bruteforce", "severity": "LOW", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "78.0.122.12" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "71.148.186.107" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 44889, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS3269 TELECOM-ITALIA" }, { "id": "atk-mvwgu7xj-345", "ts": 1793455063975, "type": "ddos", "severity": "HIGH", "src": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "129.238.63.238" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "29.49.108.19" }, "port": 22, "service": "SSH", "protocol": "ICMP", "packets": 86538, "intensity": 10, "intel": false, "actor": "anonymous", "mitre": "T1498", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvwgu5gh-340", "ts": 1793455060769, "type": "phishing", "severity": "LOW", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "106.13.95.198" }, "dst": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "151.133.67.233" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 35764, "intensity": 4, "intel": true, "malware": "Bruteforce Source", "mitre": "T1566", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgu3nh-332", "ts": 1793455058429, "type": "bruteforce", "severity": "LOW", "src": { "city": "Rio de Janeiro", "country": "Brazil", "cc": "BR", "lat": -22.91, "lng": -43.17, "ip": "103.207.4.18" }, "dst": { "city": "Osaka", "country": "Japan", "cc": "JP", "lat": 34.69, "lng": 135.5, "ip": "4.123.248.86" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 41414, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1110", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgu2c0-322", "ts": 1793455056720, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Lahore", "country": "Pakistan", "cc": "PK", "lat": 31.55, "lng": 74.34, "ip": "5.234.196.210" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "153.129.209.143" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 85257, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwgtzrs-303", "ts": 1793455053400, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "17.224.27.41" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "51.137.1.142" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 25852, "intensity": 9, "intel": false, "mitre": "T1486", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvwgtt1u-269", "ts": 1793455044690, "type": "malware", "severity": "ELEVATED", "src": { "city": "Denver", "country": "United States", "cc": "US", "lat": 39.74, "lng": -104.99, "ip": "56.231.210.59" }, "dst": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "84.95.52.169" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 83174, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS16509 AMAZON-02" }, { "id": "atk-mvwgtly5-253", "ts": 1793455035485, "type": "bruteforce", "severity": "LOW", "src": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "104.40.0.73" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "76.31.168.89" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 79339, "intensity": 9, "intel": true, "malware": "Bruteforce Source", "actor": "fin7", "campaign": "OPERATION FROZEN TEMPEST", "srcAsn": "AS14061 DIGITALOCEAN", "chain": { "id": "chain-mvwgtly5-11", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 1, "total": 4 }, "feed": "Blocklist" }, { "id": "atk-mvwgtg1d-224", "ts": 1793455027825, "type": "malware", "severity": "HIGH", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "115.75.209.182" }, "dst": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "22.111.213.238" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 7437, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1204", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgtdnh-220", "ts": 1793455024733, "type": "sqli", "severity": "HIGH", "src": { "city": "Addis Ababa", "country": "Ethiopia", "cc": "ET", "lat": 9.02, "lng": 38.75, "ip": "120.73.219.59" }, "dst": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "57.61.142.124" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 41068, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgtakc-213", "ts": 1793455020732, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Lahore", "country": "Pakistan", "cc": "PK", "lat": 31.55, "lng": 74.34, "ip": "108.240.71.150" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "72.218.121.97" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 26339, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1110", "srcAsn": "AS12389 ROSTELECOM", "feed": "Blocklist" }, { "id": "atk-mvwgtaha-212", "ts": 1793455020622, "type": "mitm", "severity": "CRITICAL", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "172.170.157.40" }, "dst": { "city": "Warsaw", "country": "Poland", "cc": "PL", "lat": 52.23, "lng": 21.01, "ip": "155.165.179.207" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 46556, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION OBSIDIAN HARBOR", "mitre": "T1041", "srcAsn": "AS16509 AMAZON-02", "chain": { "id": "chain-mvwgt9w5-9", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvwgt9w5-207", "ts": 1793455019861, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "86.138.190.94" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "182.116.78.76" }, "port": 5900, "service": "VNC", "protocol": "UDP", "packets": 82661, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION OBSIDIAN HARBOR", "srcAsn": "AS12389 ROSTELECOM", "chain": { "id": "chain-mvwgt9w5-9", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 1, "total": 4 } }, { "id": "atk-mvwgt2ai-173", "ts": 1793455010010, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Cairo", "country": "Egypt", "cc": "EG", "lat": 30.04, "lng": 31.24, "ip": "18.119.172.143" }, "dst": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "36.114.240.167" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 11900, "intensity": 5, "intel": false, "actor": "lazarus", "mitre": "T1071", "srcAsn": "AS20473 VULTR" }, { "id": "atk-mvwgsyfl-162", "ts": 1793455005009, "type": "botnet", "severity": "HIGH", "src": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "32.179.101.37" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "182.34.102.16" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 88997, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1071", "srcAsn": "AS132203 TENCENT", "ioc": "approval-ratings.uptownmusic.info", "feed": "OpenPhish" }, { "id": "atk-mvwgsxzg-158", "ts": 1793455004428, "type": "botnet", "severity": "HIGH", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "97.14.122.42" }, "dst": { "city": "Toronto", "country": "Canada", "cc": "CA", "lat": 43.65, "lng": -79.38, "ip": "8.142.212.203" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 15127, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS9498 AIRTEL" }, { "id": "atk-mvwgswot-147", "ts": 1793455002749, "type": "botnet", "severity": "HIGH", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "65.212.72.142" }, "dst": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "48.174.119.48" }, "port": 443, "service": "HTTPS", "protocol": "UDP", "packets": 78434, "intensity": 4, "intel": false, "mitre": "T1071", "srcAsn": "AS3257 GTT" }, { "id": "atk-mvwgsvvg-142", "ts": 1793455001692, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Bucharest", "country": "Romania", "cc": "RO", "lat": 44.43, "lng": 26.1, "ip": "119.246.15.94" }, "dst": { "city": "Zurich", "country": "Switzerland", "cc": "CH", "lat": 47.37, "lng": 8.54, "ip": "191.65.159.166" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 50851, "intensity": 3, "intel": true, "malware": "Bruteforce Source", "actor": "apt41", "mitre": "T1190", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvwgstsc-133", "ts": 1793454998988, "type": "xss", "severity": "ELEVATED", "src": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "115.77.190.188" }, "dst": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "197.225.233.188" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 4259, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1059.007", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgssim-123", "ts": 1793454997342, "type": "ddos", "severity": "HIGH", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "127.208.25.192" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "201.223.53.126" }, "port": 3389, "service": "RDP", "protocol": "ICMP", "packets": 77513, "intensity": 10, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS2914 NTT" }, { "id": "atk-mvwgsq40-108", "ts": 1793454994224, "type": "mitm", "severity": "CRITICAL", "src": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "169.231.33.233" }, "dst": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "36.223.36.83" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 61496, "intensity": 5, "intel": false, "actor": "fin7", "campaign": "OPERATION IRON CASCADE", "mitre": "T1041", "srcAsn": "AS4837 CHINA-UNICOM", "chain": { "id": "chain-mvwgsplx-5", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvwgspv9-106", "ts": 1793454993909, "type": "botnet", "severity": "CRITICAL", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "203.112.198.220" }, "dst": { "city": "Taipei", "country": "Taiwan", "cc": "TW", "lat": 25.03, "lng": 121.57, "ip": "10.174.200.8" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 75739, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION IRON CASCADE", "mitre": "T1543", "srcAsn": "AS4657 STARHUB", "chain": { "id": "chain-mvwgsplx-5", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvwgspow-105", "ts": 1793454993680, "type": "zeroday", "severity": "CRITICAL", "src": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "79.140.133.10" }, "dst": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "208.120.77.56" }, "port": 6379, "service": "Redis", "protocol": "UDP", "packets": 17210, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION IRON CASCADE", "mitre": "T1190", "srcAsn": "AS3269 TELECOM-ITALIA", "chain": { "id": "chain-mvwgsplx-5", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 2, "total": 4 } }, { "id": "atk-mvwgsne4-92", "ts": 1793454990700, "type": "malware", "severity": "ELEVATED", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "93.179.194.221" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "45.62.83.74" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 57594, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1204", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvwgsn21-91", "ts": 1793454990265, "type": "sqli", "severity": "ELEVATED", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "207.245.225.174" }, "dst": { "city": "Milan", "country": "Italy", "cc": "IT", "lat": 45.46, "lng": 9.19, "ip": "87.97.78.155" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 4058, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvwgskaf-86", "ts": 1793454986679, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "174.84.133.254" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "8.251.54.230" }, "port": 5900, "service": "VNC", "protocol": "ICMP", "packets": 56324, "intensity": 6, "intel": false, "mitre": "T1498", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwgsful-77", "ts": 1793454980925, "type": "phishing", "severity": "LOW", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "122.80.198.47" }, "dst": { "city": "Tel Aviv", "country": "Israel", "cc": "IL", "lat": 32.09, "lng": 34.78, "ip": "149.225.1.240" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 49521, "intensity": 7, "intel": false, "actor": "apt37", "mitre": "T1566", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvwgsch4-70", "ts": 1793454976552, "type": "phishing", "severity": "ELEVATED", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "106.75.156.189" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "166.222.186.101" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 32569, "intensity": 9, "intel": true, "malware": "Bruteforce Source", "mitre": "T1566", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvwgs9ei-65", "ts": 1793454972570, "type": "malware", "severity": "ELEVATED", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "106.37.84.42" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "92.165.90.64" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 64025, "intensity": 10, "intel": false, "actor": "apt37", "mitre": "T1204", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvwgs68h-59", "ts": 1793454968465, "type": "malware", "severity": "HIGH", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "55.134.116.188" }, "dst": { "city": "Stockholm", "country": "Sweden", "cc": "SE", "lat": 59.33, "lng": 18.07, "ip": "105.49.225.174" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 79791, "intensity": 3, "intel": false, "mitre": "T1204", "srcAsn": "AS16276 OVH" }, { "id": "atk-mvwgs4dm-55", "ts": 1793454966058, "type": "mitm", "severity": "LOW", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "104.28.165.132" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "31.125.181.131" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 11822, "intensity": 6, "intel": true, "malware": "Bruteforce Source", "mitre": "T1557", "srcAsn": "AS13335 CLOUDFLARE", "feed": "Blocklist" }, { "id": "atk-mvwgs376-53", "ts": 1793454964530, "type": "ransomware", "severity": "HIGH", "src": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "148.242.184.198" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "218.196.23.206" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 15096, "intensity": 8, "intel": false, "mitre": "T1486", "srcAsn": "AS701 VERIZON" }, { "id": "atk-mvwgrxmm-35", "ts": 1793454957310, "type": "phishing", "severity": "LOW", "src": { "city": "Addis Ababa", "country": "Ethiopia", "cc": "ET", "lat": 9.02, "lng": 38.75, "ip": "65.14.149.143" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "5.252.249.132" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 39359, "intensity": 5, "intel": false, "mitre": "T1566", "srcAsn": "AS3320 DEUTSCHE-TELEKOM" }, { "id": "atk-mvwgrw00-22", "ts": 1793454955200, "type": "bruteforce", "severity": "LOW", "src": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "75.87.129.121" }, "dst": { "city": "Atlanta", "country": "United States", "cc": "US", "lat": 33.75, "lng": -84.39, "ip": "171.63.236.193" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 60767, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS14061 DIGITALOCEAN" }, { "id": "atk-mvwgrvq8-20", "ts": 1793454954848, "type": "botnet", "severity": "CRITICAL", "src": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "29.225.55.204" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "90.100.30.18" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 65154, "intensity": 5, "intel": false, "actor": "fin7", "campaign": "OPERATION SILENT FRACTURE", "mitre": "T1041", "srcAsn": "AS20473 VULTR", "chain": { "id": "chain-mvwgrvee-0", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvwakkaz-81", "ts": 1793444535755, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "31.176.128.183" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "211.203.183.106" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 59990, "intensity": 10, "intel": false, "actor": "scattered", "mitre": "T1486", "srcAsn": "AS2516 KDDI" }, { "id": "atk-mvwakir1-76", "ts": 1793444533741, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "143.8.138.177" }, "dst": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "141.169.165.19" }, "port": 3306, "service": "MySQL", "protocol": "ICMP", "packets": 42848, "intensity": 9, "intel": false, "mitre": "T1498", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvwakgxk-60", "ts": 1793444531384, "type": "mitm", "severity": "LOW", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "140.139.124.216" }, "dst": { "city": "Kuala Lumpur", "country": "Malaysia", "cc": "MY", "lat": 3.14, "lng": 101.69, "ip": "79.179.96.78" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 84455, "intensity": 7, "intel": false, "mitre": "T1557", "srcAsn": "AS2497 IIJ" }, { "id": "atk-mvwakb83-35", "ts": 1793444523987, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "144.91.97.178" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "116.128.25.94" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 30100, "intensity": 5, "intel": false, "mitre": "T1498", "srcAsn": "AS9121 TURK-TELEKOM" }, { "id": "atk-mvwakahq-29", "ts": 1793444523038, "type": "xss", "severity": "ELEVATED", "src": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "49.168.211.27" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "195.110.141.241" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 6240, "intensity": 6, "intel": false, "actor": "anonymous", "mitre": "T1059.007", "srcAsn": "AS39386 STC" }, { "id": "atk-mvwakaar-27", "ts": 1793444522787, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "28.91.152.20" }, "dst": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "199.187.230.126" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 51254, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS3462 CHUNGHWA" }, { "id": "atk-mvw6ppyb-152", "ts": 1793438057891, "type": "mitm", "severity": "HIGH", "src": { "city": "Riyadh", "country": "Saudi Arabia", "cc": "SA", "lat": 24.71, "lng": 46.68, "ip": "12.114.184.134" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "13.96.233.182" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 14921, "intensity": 6, "intel": false, "actor": "fin7", "campaign": "OPERATION NEON HARBOR", "mitre": "T1041", "srcAsn": "AS4837 CHINA-UNICOM", "chain": { "id": "chain-mvw6pp3i-4", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 4, "total": 4 } }, { "id": "atk-mvw6pp84-147", "ts": 1793438056948, "type": "ddos", "severity": "ELEVATED", "src": { "city": "Karachi", "country": "Pakistan", "cc": "PK", "lat": 24.86, "lng": 67.01, "ip": "161.187.129.190" }, "dst": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "153.219.247.226" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 10935, "intensity": 6, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS22773 COX" }, { "id": "atk-mvw6powa-144", "ts": 1793438056522, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "86.188.242.94" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "210.34.66.190" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 10720, "intensity": 10, "intel": false, "mitre": "T1566", "srcAsn": "AS9498 AIRTEL" }, { "id": "atk-mvw6pli1-134", "ts": 1793438052121, "type": "malware", "severity": "HIGH", "src": { "city": "Hanoi", "country": "Vietnam", "cc": "VN", "lat": 21.03, "lng": 105.85, "ip": "143.162.237.59" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "154.119.106.61" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 53496, "intensity": 10, "intel": false, "actor": "fin7", "mitre": "T1204", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvw6phkt-126", "ts": 1793438047037, "type": "ddos", "severity": "ELEVATED", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "111.173.232.75" }, "dst": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "13.114.173.224" }, "port": 6379, "service": "Redis", "protocol": "ICMP", "packets": 38659, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvw6pghs-117", "ts": 1793438045632, "type": "mitm", "severity": "ELEVATED", "src": { "city": "Nairobi", "country": "Kenya", "cc": "KE", "lat": -1.29, "lng": 36.82, "ip": "32.189.61.118" }, "dst": { "city": "Ashburn", "country": "United States", "cc": "US", "lat": 39.04, "lng": -77.49, "ip": "213.109.227.199" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 30119, "intensity": 10, "intel": false, "mitre": "T1557", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvw6pfwf-112", "ts": 1793438044863, "type": "zeroday", "severity": "CRITICAL", "src": { "city": "Kuala Lumpur", "country": "Malaysia", "cc": "MY", "lat": 3.14, "lng": 101.69, "ip": "117.33.242.50" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "164.46.139.219" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 21533, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1203", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvw6pfb4-107", "ts": 1793438044096, "type": "ransomware", "severity": "HIGH", "src": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "76.53.232.24" }, "dst": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "122.139.95.69" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 59710, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS3257 GTT" }, { "id": "atk-mvw6p6r9-86", "ts": 1793438033013, "type": "ddos", "severity": "HIGH", "src": { "city": "Tashkent", "country": "Uzbekistan", "cc": "UZ", "lat": 41.3, "lng": 69.24, "ip": "194.218.177.213" }, "dst": { "city": "Perth", "country": "Australia", "cc": "AU", "lat": -31.95, "lng": 115.86, "ip": "202.252.27.245" }, "port": 3306, "service": "MySQL", "protocol": "UDP", "packets": 85132, "intensity": 9, "intel": false, "actor": "fin7", "campaign": "OPERATION HOLLOW VECTOR", "mitre": "T1498", "srcAsn": "AS1299 TELIA", "chain": { "id": "chain-mvw6p5p0-3", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 3, "total": 3 } }, { "id": "atk-mvw6oypc-67", "ts": 1793438022576, "type": "phishing", "severity": "HIGH", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "213.251.58.33" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "163.14.84.95" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 72744, "intensity": 10, "intel": false, "actor": "apt28", "campaign": "OPERATION SHADOW LANTERN", "srcAsn": "AS3215 ORANGE", "chain": { "id": "chain-mvw6oypc-2", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvw6otg6-38", "ts": 1793438015766, "type": "ransomware", "severity": "HIGH", "src": { "city": "Karachi", "country": "Pakistan", "cc": "PK", "lat": 24.86, "lng": 67.01, "ip": "120.141.30.108" }, "dst": { "city": "Miami", "country": "United States", "cc": "US", "lat": 25.76, "lng": -80.19, "ip": "214.246.174.68" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 65063, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "apt37", "campaign": "OPERATION STATIC FORGE", "mitre": "T1486", "srcAsn": "AS4134 CHINANET", "chain": { "id": "chain-mvw6orqz-1", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 3, "total": 3 }, "feed": "Blocklist" }, { "id": "atk-mvw6on5e-27", "ts": 1793438007602, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "120.205.222.77" }, "dst": { "city": "Paris", "country": "France", "cc": "FR", "lat": 48.86, "lng": 2.35, "ip": "139.170.65.123" }, "port": 5432, "service": "PostgreSQL", "protocol": "UDP", "packets": 35205, "intensity": 10, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvw0yune-160", "ts": 1793428406186, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "106.219.151.15" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "57.16.176.189" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 76869, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1566", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvw0ytji-151", "ts": 1793428404750, "type": "sqli", "severity": "ELEVATED", "src": { "city": "New Delhi", "country": "India", "cc": "IN", "lat": 28.61, "lng": 77.21, "ip": "14.33.10.133" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "7.255.229.27" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 58701, "intensity": 10, "intel": false, "mitre": "T1190", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvw0yh7t-119", "ts": 1793428388777, "type": "zeroday", "severity": "HIGH", "src": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "121.129.44.33" }, "dst": { "city": "Bangalore", "country": "India", "cc": "IN", "lat": 12.97, "lng": 77.59, "ip": "150.198.69.188" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 35966, "intensity": 10, "intel": false, "mitre": "T1203", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvw0ydzf-93", "ts": 1793428384587, "type": "bruteforce", "severity": "HIGH", "src": { "city": "Casablanca", "country": "Morocco", "cc": "MA", "lat": 33.57, "lng": -7.59, "ip": "211.66.159.46" }, "dst": { "city": "Addis Ababa", "country": "Ethiopia", "cc": "ET", "lat": 9.02, "lng": 38.75, "ip": "95.48.209.169" }, "port": 25, "service": "SMTP", "protocol": "UDP", "packets": 71040, "intensity": 8, "intel": false, "actor": "fin7", "campaign": "OPERATION NEON MIRAGE", "srcAsn": "AS4760 PCCW", "chain": { "id": "chain-mvw0ydzf-3", "archetype": "botnet", "label": "BOTNET CHAIN", "stage": 1, "total": 3 } }, { "id": "atk-mvw0ycw5-85", "ts": 1793428383173, "type": "xss", "severity": "LOW", "src": { "city": "Bangkok", "country": "Thailand", "cc": "TH", "lat": 13.76, "lng": 100.5, "ip": "189.255.195.118" }, "dst": { "city": "New York", "country": "United States", "cc": "US", "lat": 40.71, "lng": -74.01, "ip": "95.19.27.89" }, "port": 22, "service": "SSH", "protocol": "TCP", "packets": 89804, "intensity": 10, "intel": false, "mitre": "T1059.007", "srcAsn": "AS7473 SINGTEL" }, { "id": "atk-mvw0y0dw-58", "ts": 1793428366964, "type": "botnet", "severity": "HIGH", "src": { "city": "Hong Kong", "country": "Hong Kong", "cc": "HK", "lat": 22.32, "lng": 114.17, "ip": "159.167.224.15" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "160.145.181.21" }, "port": 6379, "service": "Redis", "protocol": "TCP", "packets": 2619, "intensity": 10, "intel": false, "actor": "lazarus", "mitre": "T1071", "srcAsn": "AS7018 AT&T" }, { "id": "atk-mvw0xwza-52", "ts": 1793428362550, "type": "xss", "severity": "LOW", "src": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "129.56.103.251" }, "dst": { "city": "Chicago", "country": "United States", "cc": "US", "lat": 41.88, "lng": -87.63, "ip": "127.219.7.60" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 51129, "intensity": 5, "intel": false, "mitre": "T1059.007", "srcAsn": "AS1299 TELIA" }, { "id": "atk-mvw0xqq9-36", "ts": 1793428354449, "type": "bruteforce", "severity": "LOW", "src": { "city": "Dublin", "country": "Ireland", "cc": "IE", "lat": 53.35, "lng": -6.26, "ip": "101.32.143.232" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "128.197.100.65" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 608, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "actor": "fin7", "mitre": "T1110", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvw0xpk2-27", "ts": 1793428352930, "type": "malware", "severity": "HIGH", "src": { "city": "Kuala Lumpur", "country": "Malaysia", "cc": "MY", "lat": 3.14, "lng": 101.69, "ip": "215.188.141.106" }, "dst": { "city": "Beijing", "country": "China", "cc": "CN", "lat": 39.9, "lng": 116.4, "ip": "193.197.191.158" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 76907, "intensity": 6, "intel": false, "mitre": "T1204", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvvt0om6-337", "ts": 1793415054750, "type": "ransomware", "severity": "CRITICAL", "src": { "city": "Karachi", "country": "Pakistan", "cc": "PK", "lat": 24.86, "lng": 67.01, "ip": "5.91.172.57" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "111.66.199.228" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 82372, "intensity": 10, "intel": false, "mitre": "T1486", "srcAsn": "AS174 COGENT" }, { "id": "atk-mvvt0mi1-325", "ts": 1793415052009, "type": "ddos", "severity": "CRITICAL", "src": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "103.59.161.117" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "61.246.69.86" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 82325, "intensity": 9, "intel": true, "malware": "Bruteforce Source", "mitre": "T1498", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvvt05du-270", "ts": 1793415029826, "type": "ransomware", "severity": "HIGH", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "36.137.244.19" }, "dst": { "city": "São Paulo", "country": "Brazil", "cc": "BR", "lat": -23.55, "lng": -46.63, "ip": "16.235.239.205" }, "port": 25, "service": "SMTP", "protocol": "TCP", "packets": 3519, "intensity": 10, "intel": false, "actor": "lazarus", "mitre": "T1486", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvvt035w-251", "ts": 1793415026948, "type": "malware", "severity": "ELEVATED", "src": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "40.42.148.110" }, "dst": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "175.157.227.65" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 54153, "intensity": 4, "intel": true, "malware": "Phishing Kit", "mitre": "T1204", "srcAsn": "AS12389 ROSTELECOM", "ioc": "mydpd.yeiws.cc", "feed": "OpenPhish" }, { "id": "atk-mvvt01a4-240", "ts": 1793415024508, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Shenzhen", "country": "China", "cc": "CN", "lat": 22.54, "lng": 114.06, "ip": "142.228.90.179" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "33.232.22.91" }, "port": 445, "service": "SMB", "protocol": "UDP", "packets": 1781, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS7922 COMCAST" }, { "id": "atk-mvvszw0q-229", "ts": 1793415017690, "type": "malware", "severity": "ELEVATED", "src": { "city": "Istanbul", "country": "Turkey", "cc": "TR", "lat": 41.01, "lng": 28.98, "ip": "178.152.133.207" }, "dst": { "city": "Sydney", "country": "Australia", "cc": "AU", "lat": -33.87, "lng": 151.21, "ip": "125.232.89.4" }, "port": 80, "service": "HTTP", "protocol": "TCP", "packets": 22287, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS31133 MEGAFON" }, { "id": "atk-mvvsztjj-224", "ts": 1793415014479, "type": "ddos", "severity": "HIGH", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "207.147.114.73" }, "dst": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "174.40.170.137" }, "port": 21, "service": "FTP", "protocol": "UDP", "packets": 5959, "intensity": 6, "intel": false, "mitre": "T1498", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvvszq28-215", "ts": 1793415009968, "type": "xss", "severity": "ELEVATED", "src": { "city": "Nairobi", "country": "Kenya", "cc": "KE", "lat": -1.29, "lng": 36.82, "ip": "144.50.0.234" }, "dst": { "city": "Frankfurt", "country": "Germany", "cc": "DE", "lat": 50.11, "lng": 8.68, "ip": "42.81.211.157" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 89542, "intensity": 8, "intel": false, "mitre": "T1059.007", "srcAsn": "AS2914 NTT" }, { "id": "atk-mvvszo1m-198", "ts": 1793415007354, "type": "malware", "severity": "HIGH", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "121.188.193.96" }, "dst": { "city": "Washington DC", "country": "United States", "cc": "US", "lat": 38.9, "lng": -77.04, "ip": "70.152.231.81" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 49637, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1204", "srcAsn": "AS4134 CHINANET", "feed": "Blocklist" }, { "id": "atk-mvvszn9q-192", "ts": 1793415006350, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "61.74.247.72" }, "dst": { "city": "Seattle", "country": "United States", "cc": "US", "lat": 47.61, "lng": -122.33, "ip": "105.75.16.96" }, "port": 443, "service": "HTTPS", "protocol": "TCP", "packets": 62087, "intensity": 10, "intel": false, "actor": "apt29", "mitre": "T1566", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvvszauq-159", "ts": 1793414990258, "type": "malware", "severity": "ELEVATED", "src": { "city": "Pyongyang", "country": "North Korea", "cc": "KP", "lat": 39.03, "lng": 125.75, "ip": "176.233.28.22" }, "dst": { "city": "Atlanta", "country": "United States", "cc": "US", "lat": 33.75, "lng": -84.39, "ip": "196.54.99.157" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 36942, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS12389 ROSTELECOM" }, { "id": "atk-mvvsz6xt-147", "ts": 1793414985185, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "102.210.161.204" }, "dst": { "city": "Amsterdam", "country": "Netherlands", "cc": "NL", "lat": 52.37, "lng": 4.9, "ip": "60.137.104.212" }, "port": 21, "service": "FTP", "protocol": "TCP", "packets": 69212, "intensity": 10, "intel": true, "malware": "Bruteforce Source", "mitre": "T1110", "srcAsn": "AS7922 COMCAST", "feed": "Blocklist" }, { "id": "atk-mvvsz6p2-145", "ts": 1793414984870, "type": "bruteforce", "severity": "ELEVATED", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "100.58.116.226" }, "dst": { "city": "Kyiv", "country": "Ukraine", "cc": "UA", "lat": 50.45, "lng": 30.52, "ip": "87.203.19.114" }, "port": 5432, "service": "PostgreSQL", "protocol": "TCP", "packets": 27239, "intensity": 2, "intel": true, "malware": "Bruteforce Source", "mitre": "T1110", "srcAsn": "AS4837 CHINA-UNICOM", "feed": "Blocklist" }, { "id": "atk-mvvsz6hr-143", "ts": 1793414984607, "type": "malware", "severity": "ELEVATED", "src": { "city": "Accra", "country": "Ghana", "cc": "GH", "lat": 5.6, "lng": -0.19, "ip": "210.87.3.251" }, "dst": { "city": "Bogotá", "country": "Colombia", "cc": "CO", "lat": 4.71, "lng": -74.07, "ip": "222.114.195.138" }, "port": 3389, "service": "RDP", "protocol": "TCP", "packets": 8352, "intensity": 6, "intel": false, "mitre": "T1204", "srcAsn": "AS4760 PCCW" }, { "id": "atk-mvvsz66r-141", "ts": 1793414984211, "type": "phishing", "severity": "ELEVATED", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "209.239.184.140" }, "dst": { "city": "Johannesburg", "country": "South Africa", "cc": "ZA", "lat": -26.2, "lng": 28.05, "ip": "150.34.27.131" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 61886, "intensity": 9, "intel": false, "mitre": "T1566", "srcAsn": "AS3356 LEVEL3" }, { "id": "atk-mvvsz59e-133", "ts": 1793414983010, "type": "zeroday", "severity": "ELEVATED", "src": { "city": "Perth", "country": "Australia", "cc": "AU", "lat": -31.95, "lng": 115.86, "ip": "204.142.0.91" }, "dst": { "city": "Cairo", "country": "Egypt", "cc": "EG", "lat": 30.04, "lng": 31.24, "ip": "170.193.122.73" }, "port": 445, "service": "SMB", "protocol": "TCP", "packets": 63375, "intensity": 10, "intel": false, "actor": "apt29", "campaign": "OPERATION NEON VIGIL", "mitre": "T1190", "srcAsn": "AS3352 TELEFONICA", "chain": { "id": "chain-mvvsz53p-4", "archetype": "ransom", "label": "RANSOM CHAIN", "stage": 2, "total": 3 } }, { "id": "atk-mvvsz4o5-128", "ts": 1793414982245, "type": "ddos", "severity": "CRITICAL", "src": { "city": "Dubai", "country": "UAE", "cc": "AE", "lat": 25.2, "lng": 55.27, "ip": "52.59.55.97" }, "dst": { "city": "Dallas", "country": "United States", "cc": "US", "lat": 32.78, "lng": -96.8, "ip": "221.140.25.120" }, "port": 443, "service": "HTTPS", "protocol": "UDP", "packets": 58540, "intensity": 10, "intel": false, "mitre": "T1498", "srcAsn": "AS13238 YANDEX" }, { "id": "atk-mvvsz0ql-108", "ts": 1793414977149, "type": "mitm", "severity": "ELEVATED", "src": { "city": "San Francisco", "country": "United States", "cc": "US", "lat": 37.77, "lng": -122.42, "ip": "218.113.18.83" }, "dst": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "84.74.233.221" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 27336, "intensity": 2, "intel": false, "actor": "equation", "mitre": "T1557", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvvsyz77-95", "ts": 1793414975155, "type": "xss", "severity": "ELEVATED", "src": { "city": "St. Petersburg", "country": "Russia", "cc": "RU", "lat": 59.93, "lng": 30.34, "ip": "218.78.47.144" }, "dst": { "city": "London", "country": "United Kingdom", "cc": "GB", "lat": 51.51, "lng": -0.13, "ip": "45.170.41.73" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 89100, "intensity": 4, "intel": false, "mitre": "T1059.007", "srcAsn": "AS16509 AMAZON-02" }, { "id": "atk-mvvsyvvw-87", "ts": 1793414970860, "type": "malware", "severity": "HIGH", "src": { "city": "Tehran", "country": "Iran", "cc": "IR", "lat": 35.69, "lng": 51.39, "ip": "1.124.158.127" }, "dst": { "city": "Vancouver", "country": "Canada", "cc": "CA", "lat": 49.28, "lng": -123.12, "ip": "49.27.55.85" }, "port": 8080, "service": "HTTP-ALT", "protocol": "TCP", "packets": 10446, "intensity": 10, "intel": true, "malware": "Phishing Kit", "mitre": "T1204", "srcAsn": "AS4134 CHINANET", "ioc": "bhscy82jwr-urzkq61rel-6p3o8g-nldq18w294jh.pages.dev", "feed": "OpenPhish" }, { "id": "atk-mvvsytho-82", "ts": 1793414967756, "type": "malware", "severity": "HIGH", "src": { "city": "Denver", "country": "United States", "cc": "US", "lat": 39.74, "lng": -104.99, "ip": "143.30.32.226" }, "dst": { "city": "Rio de Janeiro", "country": "Brazil", "cc": "BR", "lat": -22.91, "lng": -43.17, "ip": "140.181.158.66" }, "port": 3389, "service": "RDP", "protocol": "UDP", "packets": 22893, "intensity": 10, "intel": false, "actor": "fin7", "campaign": "OPERATION FROZEN HARBOR", "mitre": "T1543", "srcAsn": "AS7922 COMCAST", "chain": { "id": "chain-mvvsys6w-3", "archetype": "intrusion", "label": "INTRUSION CHAIN", "stage": 3, "total": 4 } }, { "id": "atk-mvvsyopt-73", "ts": 1793414961569, "type": "malware", "severity": "HIGH", "src": { "city": "Shanghai", "country": "China", "cc": "CN", "lat": 31.23, "lng": 121.47, "ip": "123.83.193.242" }, "dst": { "city": "Los Angeles", "country": "United States", "cc": "US", "lat": 34.05, "lng": -118.24, "ip": "44.200.125.119" }, "port": 53, "service": "DNS", "protocol": "TCP", "packets": 12276, "intensity": 10, "intel": false, "mitre": "T1204", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvvsyoe4-72", "ts": 1793414961148, "type": "botnet", "severity": "ELEVATED", "src": { "city": "Mexico City", "country": "Mexico", "cc": "MX", "lat": 19.43, "lng": -99.13, "ip": "222.123.123.223" }, "dst": { "city": "Tokyo", "country": "Japan", "cc": "JP", "lat": 35.68, "lng": 139.69, "ip": "195.141.159.133" }, "port": 5900, "service": "VNC", "protocol": "TCP", "packets": 42150, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS4134 CHINANET" }, { "id": "atk-mvvsyn78-67", "ts": 1793414959604, "type": "ddos", "severity": "HIGH", "src": { "city": "Moscow", "country": "Russia", "cc": "RU", "lat": 55.76, "lng": 37.62, "ip": "210.214.118.59" }, "dst": { "city": "Mumbai", "country": "India", "cc": "IN", "lat": 19.08, "lng": 72.88, "ip": "23.234.110.20" }, "port": 8080, "service": "HTTP-ALT", "protocol": "UDP", "packets": 55164, "intensity": 6, "intel": false, "actor": "sandworm", "mitre": "T1498", "srcAsn": "AS4760 PCCW" }, { "id": "atk-mvvsym4q-59", "ts": 1793414958218, "type": "botnet", "severity": "HIGH", "src": { "city": "Lagos", "country": "Nigeria", "cc": "NG", "lat": 6.52, "lng": 3.38, "ip": "115.172.74.244" }, "dst": { "city": "Singapore", "country": "Singapore", "cc": "SG", "lat": 1.35, "lng": 103.82, "ip": "62.156.222.200" }, "port": 22, "service": "SSH", "protocol": "UDP", "packets": 44600, "intensity": 10, "intel": false, "mitre": "T1071", "srcAsn": "AS4837 CHINA-UNICOM" }, { "id": "atk-mvvsyh8g-24", "ts": 1793414951872, "type": "bruteforce", "severity": "LOW", "src": { "city": "Minsk", "country": "Belarus", "cc": "BY", "lat": 53.9, "lng": 27.57, "ip": "87.150.150.93" }, "dst": { "city": "Atlanta", "country": "United States", "cc": "US", "lat": 33.75, "lng": -84.39, "ip": "75.110.73.93" }, "port": 3306, "service": "MySQL", "protocol": "TCP", "packets": 61846, "intensity": 10, "intel": false, "mitre": "T1110", "srcAsn": "AS3209 VODAFONE" } ] }