WitFoo-Artifact ::: fqdn=www.patientportal-login.com ::: action=BLOCKED ::: message={"originId":410613832,"originType":"AD Users","internalIp":"150.53.192.251","externalIp":"219.154.224.161","categories":["Malware"],"tags":[],"destination":"www.patientportal-login.com","originLabel":"alice","actionTaken":"BLOCKED","datetime":"2022-08-17T18:04:10.000Z"} ::: clientIP=150.53.192.251 ::: serverIP=219.154.224.161 ::: userName=alice ::: created_at=2022-08-17T18:04:10.000Z ::: streamName=OpenDNS Detection ::: vendorCode=Malware ::: messageType=firewall_action ::: pipelineName=OpenDNS Detection ::: severityCode=2 ::: startTimeUTC=2022-08-17T18:04:10.000Z ::: serverHostname=www.patientportal-login.com ::: pipelineEntrypoint=dispatch
Product: Umbrella
Vendor: Cisco