{
"took": 2,
"timed_out": false,
"_shards": {
"total": 5,
"successful": 5,
"skipped": 0,
"failed": 0
},
"hits": {
"total": 153,
"max_score": 27.951214,
"hits": [
{
"_index": "jsons",
"_type": "Report",
"_id": "eRr1yW0B4NPxFT8uA_gR",
"_score": 27.951214,
"_source": {
"created_time": "2018-04-03T09:38:21Z",
"labels.source_ref": [
"奇虎360"
],
"pattern": "",
"end_time": "",
"title": "indicators for 新型僵尸网络Sandiflux基于Fastflux基础架构传播,不断改变域名和IP躲避安全追踪",
"type": "indicator",
"created_by": "奇虎360",
"labels": [
{
"created_time": "2018-04-03T09:38:21Z",
"description": "c2:Sandiflux",
"action": "block",
"source_ref": "天际友盟",
"type": "ipv4",
"value": "86.120.28.33"
},
{
"created_time": "2018-04-03T09:38:21Z",
"description": "c2:Sandiflux",
"action": "block",
"source_ref": "天际友盟",
"type": "ipv4",
"value": "212.92.243.59"
},
{
"created_time": "2018-04-03T09:38:21Z",
"description": "c2:Sandiflux",
"action": "block",
"source_ref": "天际友盟",
"type": "ipv4",
"value": "185.127.245.141"
}
],
"start_time": "",
"modified_time": "2018-04-03T09:59:09Z",
"modified_by": "奇虎360",
"id": "indicator-11ed80f924074ef8a357736e0eb49c74",
"suggested_of_coa": "coa-11ed80f924074ef8a357736e0eb49c74"
}
}
]
}
}
"took": 2,
"timed_out": false,
"_shards": {
"total": 5,
"successful": 5,
"skipped": 0,
"failed": 0
},
"hits": {
"total": 153,
"max_score": 27.951214,
"hits": [
{
"_index": "jsons",
"_type": "Report",
"_id": "eRr1yW0B4NPxFT8uA_gR",
"_score": 27.951214,
"_source": {
"created_time": "2018-04-03T09:38:21Z",
"labels.source_ref": [
"奇虎360"
],
"pattern": "",
"end_time": "",
"title": "indicators for 新型僵尸网络Sandiflux基于Fastflux基础架构传播,不断改变域名和IP躲避安全追踪",
"type": "indicator",
"created_by": "奇虎360",
"labels": [
{
"created_time": "2018-04-03T09:38:21Z",
"description": "c2:Sandiflux",
"action": "block",
"source_ref": "天际友盟",
"type": "ipv4",
"value": "86.120.28.33"
},
{
"created_time": "2018-04-03T09:38:21Z",
"description": "c2:Sandiflux",
"action": "block",
"source_ref": "天际友盟",
"type": "ipv4",
"value": "212.92.243.59"
},
{
"created_time": "2018-04-03T09:38:21Z",
"description": "c2:Sandiflux",
"action": "block",
"source_ref": "天际友盟",
"type": "ipv4",
"value": "185.127.245.141"
}
],
"start_time": "",
"modified_time": "2018-04-03T09:59:09Z",
"modified_by": "奇虎360",
"id": "indicator-11ed80f924074ef8a357736e0eb49c74",
"suggested_of_coa": "coa-11ed80f924074ef8a357736e0eb49c74"
}
}
]
}
}
0 个回复