WitFoo-Artifact ::: fqdn=diromalxx.com ::: action=BLOCKED ::: message={"originId":535389021,"originType":"Network Devices","internalIp":"221.245.66.30","externalIp":"41.8.194.125","categories":["Advertisements","Malware","Phishing"],"tags":[],"destination":"diromalxx.com","originLabel":"johndoe","actionTaken":"BLOCKED","datetime":"2023-03-23T15:12:23.000Z"} ::: clientIP=221.245.66.30 ::: serverIP=41.8.194.125 ::: userName=johndoe ::: created_at=2023-03-23T15:12:23.000Z ::: streamName=OpenDNS Detection ::: vendorCode=AdvertisementsMalwarePhishing ::: messageType=firewall_action ::: pipelineName=OpenDNS Detection ::: severityCode=2 ::: startTimeUTC=2023-03-23T15:12:23.000Z ::: serverHostname=diromalxx.com ::: pipelineEntrypoint=dispatch
Product: Umbrella
Vendor: Cisco