WitFoo-Artifact ::: fqdn=sh0w-me-how.net ::: action=BLOCKED ::: message={"originId":600808038,"originType":"Network Devices","internalIp":"175.43.218.107","externalIp":"111.100.23.124","categories":["Malware","Not Actionable"],"tags":[],"destination":"sh0w-me-how.net","originLabel":"fish","actionTaken":"BLOCKED","datetime":"2023-05-17T19:34:58.000Z"} ::: clientIP=175.43.218.107 ::: serverIP=111.100.23.124 ::: userName=fish ::: created_at=2023-05-17T19:34:58.000Z ::: streamName=OpenDNS Detection ::: vendorCode=MalwareNot Actionable ::: messageType=firewall_action ::: pipelineName=OpenDNS Detection ::: severityCode=2 ::: startTimeUTC=2023-05-17T19:34:58.000Z ::: serverHostname=sh0w-me-how.net ::: pipelineEntrypoint=dispatch
Product: Umbrella
Vendor: Cisco