{ "type": "bundle", "id": "09d19423-3195-462f-a817-718f478ae33d", "objects": [ { "id": "observed-data--44040e07-cc05-484f-bdd2-2a7bda1b2dd2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.920Z", "modified": "2020-06-19T19:13:47.920Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33972, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-20T10:30:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-20T10:14:08Z", "number_observed": 1 }, { "id": "observed-data--33ac6415-4b15-42bc-9d61-88163cb9bbc3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.922Z", "modified": "2020-06-19T19:13:47.922Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "171.67.70.80", "x_com_aws_remote_city_name": "Stanford", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T09:00:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T08:36:06Z", "number_observed": 1 }, { "id": "observed-data--02114ffd-0dd0-425d-8036-66ee296e5046", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.924Z", "modified": "2020-06-19T19:13:47.924Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "45.227.254.30", "x_com_aws_remote_country_name": "Panama" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T08:00:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T07:45:05Z", "number_observed": 1 }, { "id": "observed-data--70b0905c-ff3a-45a5-89eb-e69ad9fefe62", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.925Z", "modified": "2020-06-19T19:13:47.925Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "49.88.112.109", "x_com_aws_remote_city_name": "Shanghai", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T05:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T05:27:02Z", "number_observed": 1 }, { "id": "observed-data--378ceda7-f873-4e5f-acec-445dc2be652d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.926Z", "modified": "2020-06-19T19:13:47.926Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "124.65.18.102", "x_com_aws_remote_city_name": "Beijing", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T05:30:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T05:06:02Z", "number_observed": 1 }, { "id": "observed-data--0cdd6b7e-8039-4898-887a-1e6b4141a736", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.928Z", "modified": "2020-06-19T19:13:47.928Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "111.53.76.186", "x_com_aws_remote_city_name": "Yuncheng", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T05:15:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T04:57:01Z", "number_observed": 1 }, { "id": "observed-data--8dfe7cf8-afec-4856-91a1-878083f9d04b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.931Z", "modified": "2020-06-19T19:13:47.931Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "94.191.28.158", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T04:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T04:21:01Z", "number_observed": 1 }, { "id": "observed-data--04810037-c915-4e07-81d1-b365a1eec6a7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.934Z", "modified": "2020-06-19T19:13:47.934Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.220.192.57", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T03:45:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T03:27:00Z", "number_observed": 1 }, { "id": "observed-data--253a1cd1-0334-4e30-97f8-04efd6235b7e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.937Z", "modified": "2020-06-19T19:13:47.937Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "218.92.0.184", "x_com_aws_remote_city_name": "Xinpu", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T03:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T02:56:00Z", "number_observed": 1 }, { "id": "observed-data--d569d2b7-ef07-467a-8e78-d25ce5fb471f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.939Z", "modified": "2020-06-19T19:13:47.939Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "94.102.49.190", "x_com_aws_remote_country_name": "Netherlands" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T03:00:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T02:47:00Z", "number_observed": 1 }, { "id": "observed-data--965057d4-8047-4d70-9be4-8ec493a7c261", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.940Z", "modified": "2020-06-19T19:13:47.940Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "80.82.70.118", "x_com_aws_remote_city_name": "Anse aux Pins", "x_com_aws_remote_country_name": "Seychelles" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T02:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T02:16:59Z", "number_observed": 1 }, { "id": "observed-data--6ece157f-d22f-469c-88c2-82d09a272daf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.942Z", "modified": "2020-06-19T19:13:47.942Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "178.54.207.101", "x_com_aws_remote_city_name": "Bila Tserkva", "x_com_aws_remote_country_name": "Ukraine" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T01:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T00:40:57Z", "number_observed": 1 }, { "id": "observed-data--2c9c4f01-58de-4ee7-a46f-a9a6fcd1903f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.943Z", "modified": "2020-06-19T19:13:47.943Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "45.136.109.83", "x_com_aws_remote_country_name": "Germany" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T00:45:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T00:20:57Z", "number_observed": 1 }, { "id": "observed-data--0ea2ee19-a0c9-4ad5-bda9-5f1fb7323990", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.944Z", "modified": "2020-06-19T19:13:47.944Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "60.12.215.85", "x_com_aws_remote_city_name": "Ningbo", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-20T00:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-20T00:00:57Z", "number_observed": 1 }, { "id": "observed-data--a4f96718-ba6c-4c4e-acb6-1a8f963b0c56", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.946Z", "modified": "2020-06-19T19:13:47.946Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.220.192.57", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T23:30:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T23:00:56Z", "number_observed": 1 }, { "id": "observed-data--7590717e-ad54-4bb2-ba05-ad427b2bef40", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.948Z", "modified": "2020-06-19T19:13:47.948Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "115.68.1.14", "x_com_aws_remote_country_name": "South Korea" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T22:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T21:50:55Z", "number_observed": 1 }, { "id": "observed-data--5e806949-390c-4a88-8e35-fc08f6d1c8e8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.949Z", "modified": "2020-06-19T19:13:47.950Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.162.120.98", "x_com_aws_remote_city_name": "Tokyo", "x_com_aws_remote_country_name": "Japan" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T19:30:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T19:10:53Z", "number_observed": 1 }, { "id": "observed-data--c86d145a-6b0b-4554-9195-3f7265e8ae00", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.951Z", "modified": "2020-06-19T19:13:47.951Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "185.164.72.217", "x_com_aws_remote_city_name": "Amsterdam", "x_com_aws_remote_country_name": "Netherlands" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T18:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T17:30:51Z", "number_observed": 1 }, { "id": "observed-data--98a7d3c8-d552-4761-ae8b-b1a9bed2f89a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.952Z", "modified": "2020-06-19T19:13:47.952Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "119.183.78.172", "x_com_aws_remote_city_name": "Rizhao", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T14:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T14:25:48Z", "number_observed": 1 }, { "id": "observed-data--c1b36392-7f91-437e-926d-325c14c3d218", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.953Z", "modified": "2020-06-19T19:13:47.953Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "60.12.215.85", "x_com_aws_remote_city_name": "Ningbo", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T14:15:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T14:00:48Z", "number_observed": 1 }, { "id": "observed-data--7ee527e8-dae3-4fdd-a456-fd93273f953a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.955Z", "modified": "2020-06-19T19:13:47.955Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "94.191.28.158", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T13:30:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T13:00:47Z", "number_observed": 1 }, { "id": "observed-data--2b48d301-84eb-41ed-b73f-1068423f7352", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.956Z", "modified": "2020-06-19T19:13:47.956Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "218.92.0.137", "x_com_aws_remote_city_name": "Xinpu", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T13:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T12:56:47Z", "number_observed": 1 }, { "id": "observed-data--980bbf4e-a2a1-4b5f-b219-ee29d171e809", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.957Z", "modified": "2020-06-19T19:13:47.957Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "153.37.121.128", "x_com_aws_remote_city_name": "Nantong", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T13:00:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T12:30:46Z", "number_observed": 1 }, { "id": "observed-data--7c422ad7-9e28-4426-a188-8ec146e00d45", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.959Z", "modified": "2020-06-19T19:13:47.959Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "60.184.215.213", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T12:45:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T12:26:46Z", "number_observed": 1 }, { "id": "observed-data--ae67d939-27a0-4cf4-9cee-e826c0c31efd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.960Z", "modified": "2020-06-19T19:13:47.960Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "159.65.230.189", "x_com_aws_remote_city_name": "North Bergen", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T11:00:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T10:40:45Z", "number_observed": 1 }, { "id": "observed-data--db94d458-fd33-4580-9077-d67dba3c6bb4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.962Z", "modified": "2020-06-19T19:13:47.962Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T10:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T10:20:44Z", "number_observed": 1 }, { "id": "observed-data--bd5145d4-f74d-472b-be08-d4dde931500e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.964Z", "modified": "2020-06-19T19:13:47.964Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34930, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-19T10:45:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-19T10:24:44Z", "number_observed": 1 }, { "id": "observed-data--e8b3b194-8c88-41be-869a-b5bda934a333", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.966Z", "modified": "2020-06-19T19:13:47.966Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "198.108.67.136", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T10:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T09:49:44Z", "number_observed": 1 }, { "id": "observed-data--cc83487c-86b4-438a-a942-33a27b6e2474", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.969Z", "modified": "2020-06-19T19:13:47.969Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "60.161.194.45", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T09:45:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T09:24:43Z", "number_observed": 1 }, { "id": "observed-data--afc2d4ab-5fc4-4673-bcdb-a51dcfacdb83", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.971Z", "modified": "2020-06-19T19:13:47.971Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "171.67.70.80", "x_com_aws_remote_city_name": "Stanford", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T09:00:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T08:36:42Z", "number_observed": 1 }, { "id": "observed-data--ba2abf10-fc59-4956-bede-fda438dd4e66", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.973Z", "modified": "2020-06-19T19:13:47.973Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T07:30:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T07:06:40Z", "number_observed": 1 }, { "id": "observed-data--bc8ef12d-2bf6-4ade-94df-e888533dd3c1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.976Z", "modified": "2020-06-19T19:13:47.976Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T07:15:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T06:50:39Z", "number_observed": 1 }, { "id": "observed-data--49ddd688-e81a-48c6-aab7-67cd6714ee9f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.978Z", "modified": "2020-06-19T19:13:47.978Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "157.245.96.68", "x_com_aws_remote_city_name": "Bengaluru", "x_com_aws_remote_country_name": "India" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T06:30:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T06:15:39Z", "number_observed": 1 }, { "id": "observed-data--3f3f2c60-8899-498f-866e-878a87cf5060", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.981Z", "modified": "2020-06-19T19:13:47.981Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "45.136.109.83", "x_com_aws_remote_country_name": "Germany" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T06:00:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T05:46:38Z", "number_observed": 1 }, { "id": "observed-data--ee278153-407f-4b08-9263-18e04b4348d0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.983Z", "modified": "2020-06-19T19:13:47.983Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "49.88.112.109", "x_com_aws_remote_city_name": "Shanghai", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T05:45:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T05:10:38Z", "number_observed": 1 }, { "id": "observed-data--de656ed1-d8e2-4b61-8aba-26ae3e545813", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.985Z", "modified": "2020-06-19T19:13:47.985Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "115.68.1.14", "x_com_aws_remote_country_name": "South Korea" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T04:00:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T03:45:37Z", "number_observed": 1 }, { "id": "observed-data--5edf9702-63c7-4faf-93be-d43c8badcef5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.987Z", "modified": "2020-06-19T19:13:47.987Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "142.4.123.182", "x_com_aws_remote_city_name": "San Jose", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T03:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T02:45:36Z", "number_observed": 1 }, { "id": "observed-data--ebbd2d16-7d26-4424-888d-78a812042da2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.990Z", "modified": "2020-06-19T19:13:47.990Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T02:15:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T01:55:35Z", "number_observed": 1 }, { "id": "observed-data--efcaa52c-198c-44d8-9e34-5c1ff5f7dfbc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.992Z", "modified": "2020-06-19T19:13:47.992Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "101.36.138.61", "x_com_aws_remote_city_name": "Beijing", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-19T01:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-19T00:50:33Z", "number_observed": 1 }, { "id": "observed-data--d27ebce3-e52e-4b91-b713-d75be86e3b31", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.995Z", "modified": "2020-06-19T19:13:47.995Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33414, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-19T01:00:02.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-19T00:30:33Z", "number_observed": 1 }, { "id": "observed-data--f027c46c-fe3c-4b37-bc7c-460b920b8356", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.997Z", "modified": "2020-06-19T19:13:47.997Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T23:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T23:16:31Z", "number_observed": 1 }, { "id": "observed-data--2b2f3e43-5978-4299-a193-401bf0f925df", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:47.999Z", "modified": "2020-06-19T19:13:47.999Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T22:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T22:00:30Z", "number_observed": 1 }, { "id": "observed-data--37487331-6f79-4e9a-a90f-3c1d0f462041", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.002Z", "modified": "2020-06-19T19:13:48.002Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "153.37.121.128", "x_com_aws_remote_city_name": "Nantong", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T22:15:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T21:46:30Z", "number_observed": 1 }, { "id": "observed-data--d009bba4-7867-4955-9f8a-1bbf73db51b1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.004Z", "modified": "2020-06-19T19:13:48.004Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T20:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T20:20:28Z", "number_observed": 1 }, { "id": "observed-data--2063bab2-ee2b-4b6b-bf36-09ee294adcab", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.005Z", "modified": "2020-06-19T19:13:48.005Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 32776, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-18T19:45:03.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-18T19:25:27Z", "number_observed": 1 }, { "id": "observed-data--dae37f50-7324-4d0b-a1f3-a7c3c6c82657", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.006Z", "modified": "2020-06-19T19:13:48.006Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "49.69.200.63", "x_com_aws_remote_city_name": "Yancheng", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T19:00:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T18:40:27Z", "number_observed": 1 }, { "id": "observed-data--b62fdfc5-58b3-4964-8f39-b13c1ae85afe", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.008Z", "modified": "2020-06-19T19:13:48.008Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "64.44.40.210", "x_com_aws_remote_city_name": "Buffalo", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T17:15:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T17:06:25Z", "number_observed": 1 }, { "id": "observed-data--2e0d87ca-36e9-4858-b5a0-e9fa48109e5d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.009Z", "modified": "2020-06-19T19:13:48.009Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "141.98.81.111", "x_com_aws_remote_country_name": "Panama" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T14:15:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T14:06:22Z", "number_observed": 1 }, { "id": "observed-data--736536e2-ecf9-4b28-a2ea-4163ddde3cdc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.011Z", "modified": "2020-06-19T19:13:48.011Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33150, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-18T12:00:00.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-18T11:40:19Z", "number_observed": 1 }, { "id": "observed-data--bf9a4d43-d770-4cce-9ed7-f2f98cb2c874", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.012Z", "modified": "2020-06-19T19:13:48.012Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34540, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-18T11:30:01.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-18T11:14:19Z", "number_observed": 1 }, { "id": "observed-data--42df141b-3a4f-4a35-bd08-1c7f3ee5895a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.013Z", "modified": "2020-06-19T19:13:48.013Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "198.108.67.136", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T11:15:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T10:55:19Z", "number_observed": 1 }, { "id": "observed-data--48695a4c-1f9b-45c3-87a9-9a39f172e4b5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.015Z", "modified": "2020-06-19T19:13:48.015Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "115.213.134.162", "x_com_aws_remote_city_name": "Lishui", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T09:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T09:20:16Z", "number_observed": 1 }, { "id": "observed-data--71a73807-233b-4527-8455-bf68b49f9e36", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.016Z", "modified": "2020-06-19T19:13:48.016Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "171.67.70.80", "x_com_aws_remote_city_name": "Stanford", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T09:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T08:35:15Z", "number_observed": 1 }, { "id": "observed-data--5efb0cb0-9d61-4816-a50b-3aabe0319b4e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.017Z", "modified": "2020-06-19T19:13:48.017Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "178.54.207.101", "x_com_aws_remote_city_name": "Bila Tserkva", "x_com_aws_remote_country_name": "Ukraine" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T08:45:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T08:20:15Z", "number_observed": 1 }, { "id": "observed-data--7192afa9-3f2c-4364-b868-f831717e83a9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.019Z", "modified": "2020-06-19T19:13:48.019Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "183.136.236.43", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T08:00:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T07:30:14Z", "number_observed": 1 }, { "id": "observed-data--fc88b201-13fb-4520-a46f-2d7c8a68849b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.020Z", "modified": "2020-06-19T19:13:48.020Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "49.88.112.109", "x_com_aws_remote_city_name": "Shanghai", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T07:30:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T07:05:13Z", "number_observed": 1 }, { "id": "observed-data--1e2a3346-b16b-4124-bb32-7e523cbb0aff", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.021Z", "modified": "2020-06-19T19:13:48.021Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.162.120.98", "x_com_aws_remote_city_name": "Tokyo", "x_com_aws_remote_country_name": "Japan" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T06:00:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T05:45:11Z", "number_observed": 1 }, { "id": "observed-data--bf5d987a-ab56-47d7-bb0e-19426e68ff71", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.022Z", "modified": "2020-06-19T19:13:48.022Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34042, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-18T03:00:05.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-18T02:30:09Z", "number_observed": 1 }, { "id": "observed-data--536a7eb1-4bc9-4950-9dbe-c8018caa98d6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.024Z", "modified": "2020-06-19T19:13:48.024Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "111.53.76.186", "x_com_aws_remote_city_name": "Yuncheng", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T02:45:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-18T02:10:08Z", "number_observed": 1 }, { "id": "observed-data--13409845-a728-4262-9062-89813f1a3e2b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.025Z", "modified": "2020-06-19T19:13:48.025Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "183.136.236.43", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-18T00:00:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T23:30:05Z", "number_observed": 1 }, { "id": "observed-data--238ea2b1-5f38-49ba-9d03-ffe606a919c8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.026Z", "modified": "2020-06-19T19:13:48.026Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "185.176.27.42", "x_com_aws_remote_country_name": "Russia" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T23:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T22:55:04Z", "number_observed": 1 }, { "id": "observed-data--3c37e450-61be-4429-9c9b-1f77cc708b0b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.028Z", "modified": "2020-06-19T19:13:48.028Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "195.154.207.199", "x_com_aws_remote_country_name": "France" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T21:30:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T21:01:03Z", "number_observed": 1 }, { "id": "observed-data--e2282d48-3a57-4ff8-be58-e71d3568861f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.029Z", "modified": "2020-06-19T19:13:48.029Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "195.154.207.199", "x_com_aws_remote_country_name": "France" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T21:15:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T20:57:03Z", "number_observed": 1 }, { "id": "observed-data--5b875010-f25b-476d-a372-2c038d0f8d59", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.030Z", "modified": "2020-06-19T19:13:48.030Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "195.154.207.199", "x_com_aws_remote_country_name": "France" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T21:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T20:31:02Z", "number_observed": 1 }, { "id": "observed-data--343f0a6d-2a43-466d-93da-b6877e5d2016", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.031Z", "modified": "2020-06-19T19:13:48.031Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 40810, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T20:45:01.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T20:14:02Z", "number_observed": 1 }, { "id": "observed-data--f0bf1aec-a337-4100-92c1-c34532601b0b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.033Z", "modified": "2020-06-19T19:13:48.033Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 43428, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T20:15:05.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T19:57:02Z", "number_observed": 1 }, { "id": "observed-data--b3ebf8fe-23bf-45ab-8804-3900b341ce82", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.034Z", "modified": "2020-06-19T19:13:48.034Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34382, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T19:00:00.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T18:15:00Z", "number_observed": 1 }, { "id": "observed-data--0e84671c-598f-4bc3-a4cb-c6f89a2fc552", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.035Z", "modified": "2020-06-19T19:13:48.035Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33082, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T16:30:00.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T16:06:59Z", "number_observed": 1 }, { "id": "observed-data--28064c70-58ee-4a2b-bea4-3e1e6851b5e9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.036Z", "modified": "2020-06-19T19:13:48.036Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 35176, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T14:00:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T13:38:57Z", "number_observed": 1 }, { "id": "observed-data--dc13d61b-f1d9-458e-a24e-8915a7b705d9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.037Z", "modified": "2020-06-19T19:13:48.037Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "58.255.40.19", "x_com_aws_remote_city_name": "Dongguan", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T13:45:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T13:20:56Z", "number_observed": 1 }, { "id": "observed-data--7c749a3e-90cc-4707-b1bb-1fd6616796dc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.039Z", "modified": "2020-06-19T19:13:48.039Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "45.136.109.83", "x_com_aws_remote_country_name": "Germany" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T13:00:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T12:37:55Z", "number_observed": 1 }, { "id": "observed-data--f8321008-0e0e-46d8-b7e1-6a9505adfb16", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.040Z", "modified": "2020-06-19T19:13:48.040Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33368, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T11:30:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T11:10:54Z", "number_observed": 1 }, { "id": "observed-data--22439051-ee12-4820-b3e8-317359b8b892", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.041Z", "modified": "2020-06-19T19:13:48.041Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.77.210", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T09:45:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T09:10:51Z", "number_observed": 1 }, { "id": "observed-data--0c4b5e94-3edb-4c31-87e4-8f92a2044e5b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.043Z", "modified": "2020-06-19T19:13:48.043Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 32820, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T09:30:05.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T09:05:51Z", "number_observed": 1 }, { "id": "observed-data--388edb28-9d20-49bc-9c7c-0aba34b3c539", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.044Z", "modified": "2020-06-19T19:13:48.044Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "171.67.70.80", "x_com_aws_remote_city_name": "Stanford", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T09:00:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T08:35:51Z", "number_observed": 1 }, { "id": "observed-data--409116b6-daed-48eb-950a-c6235250faea", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.045Z", "modified": "2020-06-19T19:13:48.045Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.77.210", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T08:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T07:55:50Z", "number_observed": 1 }, { "id": "observed-data--8ec86223-28ae-4170-aebf-d647d715a7c6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.046Z", "modified": "2020-06-19T19:13:48.046Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34598, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T07:30:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T07:00:49Z", "number_observed": 1 }, { "id": "observed-data--ce559c8e-1108-4fc2-9755-f29a1a1caa04", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.048Z", "modified": "2020-06-19T19:13:48.048Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "35.134.208.106", "x_com_aws_remote_city_name": "Grand Junction", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T06:00:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T05:46:48Z", "number_observed": 1 }, { "id": "observed-data--2f99f9cd-d827-4277-814f-a1ee91355f00", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.049Z", "modified": "2020-06-19T19:13:48.049Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.220.192.57", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T05:15:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T04:50:47Z", "number_observed": 1 }, { "id": "observed-data--d4b8b625-a846-40ad-8272-369188e31a48", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.050Z", "modified": "2020-06-19T19:13:48.050Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 32908, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T05:15:02.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T04:56:47Z", "number_observed": 1 }, { "id": "observed-data--56c87fe9-3738-4782-af5d-42c985fb8624", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.051Z", "modified": "2020-06-19T19:13:48.051Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 35198, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T03:00:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T02:49:45Z", "number_observed": 1 }, { "id": "observed-data--abb76408-65f7-498b-aaf5-1f4b8f6aaf11", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.053Z", "modified": "2020-06-19T19:13:48.053Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "171.67.70.204", "x_com_aws_remote_city_name": "Stanford", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T01:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-17T01:05:43Z", "number_observed": 1 }, { "id": "observed-data--d3c4e602-4672-407e-8714-02917ac13a34", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.054Z", "modified": "2020-06-19T19:13:48.054Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 35914, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-17T01:15:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-17T00:43:43Z", "number_observed": 1 }, { "id": "observed-data--3f8aaab5-e59f-4c91-916b-792f97250c8f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.055Z", "modified": "2020-06-19T19:13:48.055Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.79.242", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-17T00:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T23:36:42Z", "number_observed": 1 }, { "id": "observed-data--61c2021d-fa35-4d00-ba7e-fc99aa8adfc2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.057Z", "modified": "2020-06-19T19:13:48.057Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "198.108.67.138", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T23:30:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T22:30:40Z", "number_observed": 1 }, { "id": "observed-data--0f8c9347-83c2-428a-8a06-d476ab06cea4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.059Z", "modified": "2020-06-19T19:13:48.059Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33570, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T23:30:03.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T22:39:41Z", "number_observed": 1 }, { "id": "observed-data--13deec9a-d566-42dd-9ca0-8ee413e0dfd6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.061Z", "modified": "2020-06-19T19:13:48.061Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.76.201", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T23:00:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T22:10:40Z", "number_observed": 1 }, { "id": "observed-data--9070ac64-1278-455c-9bcb-b873b1a0e13f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.062Z", "modified": "2020-06-19T19:13:48.062Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 32942, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T21:15:02.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T20:35:38Z", "number_observed": 1 }, { "id": "observed-data--922a9518-df09-413d-b45d-eddea8ad0db0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.064Z", "modified": "2020-06-19T19:13:48.064Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34914, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T19:15:00.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T18:30:36Z", "number_observed": 1 }, { "id": "observed-data--df9e306b-0123-4f6b-bd80-c88081eccd81", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.066Z", "modified": "2020-06-19T19:13:48.066Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "107.6.171.133", "x_com_aws_remote_city_name": "Amsterdam", "x_com_aws_remote_country_name": "Netherlands" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T18:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T18:20:36Z", "number_observed": 1 }, { "id": "observed-data--86a630d0-2e59-44bc-9e06-effa268acb76", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.068Z", "modified": "2020-06-19T19:13:48.068Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.220.192.57", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T18:30:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T18:05:36Z", "number_observed": 1 }, { "id": "observed-data--9aa4b259-57a3-41fb-ae2e-a697d32f8dc0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.070Z", "modified": "2020-06-19T19:13:48.070Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "141.98.81.111", "x_com_aws_remote_country_name": "Panama" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T18:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T17:30:35Z", "number_observed": 1 }, { "id": "observed-data--2cd037b7-2b85-43db-986d-430229506c43", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.072Z", "modified": "2020-06-19T19:13:48.072Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 36060, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T16:45:05.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T16:26:34Z", "number_observed": 1 }, { "id": "observed-data--2e6c53cf-7760-4625-89f4-1194546d0b31", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.074Z", "modified": "2020-06-19T19:13:48.074Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "45.136.109.83", "x_com_aws_remote_country_name": "Germany" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T16:30:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T16:06:34Z", "number_observed": 1 }, { "id": "observed-data--2dde41c8-5539-4afb-8c4f-4e74607f6b30", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.076Z", "modified": "2020-06-19T19:13:48.076Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "193.201.224.158", "x_com_aws_remote_country_name": "Ukraine" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T15:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T14:40:33Z", "number_observed": 1 }, { "id": "observed-data--8941bcc2-ff7c-42f5-8ce7-3f651c01200e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.078Z", "modified": "2020-06-19T19:13:48.078Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "193.201.224.158", "x_com_aws_remote_country_name": "Ukraine" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T15:00:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T14:36:33Z", "number_observed": 1 }, { "id": "observed-data--1fb15006-33a5-4bf7-87c7-31fc991d8f17", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.080Z", "modified": "2020-06-19T19:13:48.080Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "183.136.236.43", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T14:30:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T14:10:33Z", "number_observed": 1 }, { "id": "observed-data--334a7020-a1ae-4200-8662-dfe1dd217c39", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.082Z", "modified": "2020-06-19T19:13:48.082Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 32992, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T14:30:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T14:19:33Z", "number_observed": 1 }, { "id": "observed-data--18175084-f2de-40e4-8e8b-27bb38564bd7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.083Z", "modified": "2020-06-19T19:13:48.083Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "111.53.76.186", "x_com_aws_remote_city_name": "Yuncheng", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T14:00:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T13:40:32Z", "number_observed": 1 }, { "id": "observed-data--e3b67ccc-1ffd-4971-bffc-50bbd8706e55", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.085Z", "modified": "2020-06-19T19:13:48.085Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "92.63.194.50", "x_com_aws_remote_country_name": "Ukraine" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T13:15:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T12:40:31Z", "number_observed": 1 }, { "id": "observed-data--114ff2b4-e70b-4baa-857c-353e250d2c1e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.087Z", "modified": "2020-06-19T19:13:48.087Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "183.136.236.43", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T13:00:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T12:36:31Z", "number_observed": 1 }, { "id": "observed-data--3ff8b0b8-351c-49ab-8efd-0b3dc39c43a8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.089Z", "modified": "2020-06-19T19:13:48.089Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 46620, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.72.189", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6eb6e844fc14b1ed36e304cce7685bcf", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.72.189 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T12:45:03.000Z" }, "first_observed": "2019-10-15T17:29:14Z", "last_observed": "2019-10-16T12:10:30Z", "number_observed": 1 }, { "id": "observed-data--29284a86-9890-4300-a0b2-267ca6f18c93", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.090Z", "modified": "2020-06-19T19:13:48.090Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34814, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T12:30:05.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T12:09:30Z", "number_observed": 1 }, { "id": "observed-data--02b57b67-2f92-4ede-82ad-ae8007eb9e76", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.091Z", "modified": "2020-06-19T19:13:48.091Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "71.6.135.131", "x_com_aws_remote_city_name": "San Diego", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T12:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T11:45:30Z", "number_observed": 1 }, { "id": "observed-data--5a4714d1-5896-4e96-bcad-545810bf3f76", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.093Z", "modified": "2020-06-19T19:13:48.093Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "59.173.19.66", "x_com_aws_remote_city_name": "Wuhan", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T11:45:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T11:10:29Z", "number_observed": 1 }, { "id": "observed-data--e5f85c48-5f7c-45c1-a0bc-dadca7b6fd6c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.094Z", "modified": "2020-06-19T19:13:48.094Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "167.99.156.123", "x_com_aws_remote_city_name": "North Bergen", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T11:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T11:05:29Z", "number_observed": 1 }, { "id": "observed-data--a667d0ce-3c1a-4c3d-bd3b-b44c63eae70d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.095Z", "modified": "2020-06-19T19:13:48.095Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.76.201", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T11:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T10:36:29Z", "number_observed": 1 }, { "id": "observed-data--a5040f85-5765-4328-adc8-f20c521347e5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.097Z", "modified": "2020-06-19T19:13:48.097Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "49.88.112.109", "x_com_aws_remote_city_name": "Shanghai", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T10:30:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T10:15:28Z", "number_observed": 1 }, { "id": "observed-data--4673eee7-a040-4626-baa3-e2b32a181e40", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.098Z", "modified": "2020-06-19T19:13:48.098Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33482, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T10:30:01.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T10:04:28Z", "number_observed": 1 }, { "id": "observed-data--c9c1e8fe-2681-4df4-9d44-79c85ef9e133", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.099Z", "modified": "2020-06-19T19:13:48.099Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "198.108.67.139", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T10:00:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T09:30:27Z", "number_observed": 1 }, { "id": "observed-data--a53eb4e5-6840-4a16-b688-a0684902c324", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.100Z", "modified": "2020-06-19T19:13:48.100Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33048, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.72.189", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6eb6e844fc14b1ed36e304cce7685bcf", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.72.189 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T10:00:01.000Z" }, "first_observed": "2019-10-15T17:29:14Z", "last_observed": "2019-10-16T09:30:27Z", "number_observed": 1 }, { "id": "observed-data--19dde0e4-975c-4fd6-a28c-844bfa3bdf3b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.102Z", "modified": "2020-06-19T19:13:48.102Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.73.176", "x_com_aws_remote_city_name": "Phoenix", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T09:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T09:15:27Z", "number_observed": 1 }, { "id": "observed-data--3a416e01-9646-49d0-9f05-46a21e9b11c9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.103Z", "modified": "2020-06-19T19:13:48.103Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "171.67.70.80", "x_com_aws_remote_city_name": "Stanford", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T08:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T08:16:26Z", "number_observed": 1 }, { "id": "observed-data--d30c5d0a-f972-4c1c-9fff-2b9e006c401d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.104Z", "modified": "2020-06-19T19:13:48.104Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33210, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T08:30:04.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T08:00:26Z", "number_observed": 1 }, { "id": "observed-data--cb3ef093-ae50-4865-bac4-7f04bf4f1166", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.105Z", "modified": "2020-06-19T19:13:48.105Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33864, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T08:15:06.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T07:56:26Z", "number_observed": 1 }, { "id": "observed-data--dc5a7aa7-ff69-4012-a560-98fcec9fecf6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.106Z", "modified": "2020-06-19T19:13:48.106Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34622, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.72.189", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6eb6e844fc14b1ed36e304cce7685bcf", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.72.189 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T08:00:01.000Z" }, "first_observed": "2019-10-15T17:29:14Z", "last_observed": "2019-10-16T07:35:25Z", "number_observed": 1 }, { "id": "observed-data--571864c1-2c31-4808-ad5c-6a44fc6771a8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.108Z", "modified": "2020-06-19T19:13:48.108Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "111.53.76.186", "x_com_aws_remote_city_name": "Yuncheng", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T07:45:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T07:15:25Z", "number_observed": 1 }, { "id": "observed-data--a92f8c22-c65f-438a-88c5-5d1b46cdf83f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.109Z", "modified": "2020-06-19T19:13:48.109Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "125.160.17.32", "x_com_aws_remote_city_name": "Malang", "x_com_aws_remote_country_name": "Indonesia" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T07:30:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T07:05:25Z", "number_observed": 1 }, { "id": "observed-data--bca4732f-fa9c-4c09-be47-4b1bea137775", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.110Z", "modified": "2020-06-19T19:13:48.110Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "183.136.236.43", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T07:15:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T06:56:24Z", "number_observed": 1 }, { "id": "observed-data--7d43697d-2be6-4617-89f3-d48f76f6077f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.111Z", "modified": "2020-06-19T19:13:48.111Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 34882, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.217.7", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "26b6e9aaecfc1aa80fcb229efb0e75ff", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.217.7 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T06:55:05.000Z" }, "first_observed": "2019-10-16T06:30:08Z", "last_observed": "2019-10-16T06:35:24Z", "number_observed": 1 }, { "id": "observed-data--692de870-572c-4957-9056-491bcf99c28a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.113Z", "modified": "2020-06-19T19:13:48.113Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "221.207.32.250", "x_com_aws_remote_city_name": "Xining", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T06:30:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T06:00:23Z", "number_observed": 1 }, { "id": "observed-data--f778774d-ef9d-405f-acf3-e4536ed80eeb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.115Z", "modified": "2020-06-19T19:13:48.115Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 33564, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.162.49", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6cb6e99751fcbed76aae1a9a64bb96a8", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.162.49 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-16T06:10:00.000Z" }, "first_observed": "2019-10-16T05:55:25Z", "last_observed": "2019-10-16T05:59:23Z", "number_observed": 1 }, { "id": "observed-data--78042c78-5d02-4a4b-a252-d0a18b8734db", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.116Z", "modified": "2020-06-19T19:13:48.116Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "60.184.134.167", "x_com_aws_remote_city_name": "Lishui", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T05:15:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T04:40:22Z", "number_observed": 1 }, { "id": "observed-data--e9bf2f47-d00f-4302-89a9-895863b4ab71", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.118Z", "modified": "2020-06-19T19:13:48.118Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.220.192.57", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T04:30:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T04:10:22Z", "number_observed": 1 }, { "id": "observed-data--43229c7a-44a4-4704-b39f-0f203762bf70", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.119Z", "modified": "2020-06-19T19:13:48.119Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "125.160.17.32", "x_com_aws_remote_city_name": "Malang", "x_com_aws_remote_country_name": "Indonesia" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T03:45:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T03:15:21Z", "number_observed": 1 }, { "id": "observed-data--afdd6da4-edec-4820-92c8-21a3ca4efd3f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.120Z", "modified": "2020-06-19T19:13:48.120Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.79.242", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T02:45:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T02:20:20Z", "number_observed": 1 }, { "id": "observed-data--6cfa9db3-0c3b-4b48-87b2-f360ed3c8a77", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.122Z", "modified": "2020-06-19T19:13:48.122Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "183.63.122.242", "x_com_aws_remote_city_name": "Guangzhou", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T02:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T01:40:19Z", "number_observed": 1 }, { "id": "observed-data--954fe660-ddef-4251-b48c-48dcf2410dec", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.123Z", "modified": "2020-06-19T19:13:48.123Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "101.36.138.61", "x_com_aws_remote_city_name": "Beijing", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T01:30:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T01:00:19Z", "number_observed": 1 }, { "id": "observed-data--5dd4ecb4-0493-42ff-8dec-fca69af21589", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.124Z", "modified": "2020-06-19T19:13:48.124Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "124.65.18.102", "x_com_aws_remote_city_name": "Beijing", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T01:00:03.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-16T00:45:18Z", "number_observed": 1 }, { "id": "observed-data--550dba10-13de-4429-b8cc-5df8cd34e631", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.126Z", "modified": "2020-06-19T19:13:48.126Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.77.219", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-16T00:00:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T23:30:17Z", "number_observed": 1 }, { "id": "observed-data--979da25f-180a-47ed-912e-f0eb213ad54c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.128Z", "modified": "2020-06-19T19:13:48.128Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "167.99.156.123", "x_com_aws_remote_city_name": "North Bergen", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T21:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T20:35:15Z", "number_observed": 1 }, { "id": "observed-data--09024a13-a3f7-4ca1-b47f-e59b7a331ef7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.129Z", "modified": "2020-06-19T19:13:48.129Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "45.136.109.83", "x_com_aws_remote_country_name": "Germany" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T20:00:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T19:30:14Z", "number_observed": 1 }, { "id": "observed-data--a929fe7a-146c-468a-b300-a22b3b838f0d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.131Z", "modified": "2020-06-19T19:13:48.131Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "141.98.81.111", "x_com_aws_remote_country_name": "Panama" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T19:45:06.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T19:16:13Z", "number_observed": 1 }, { "id": "observed-data--17b2cc29-aa49-4c4c-b4e6-ee4e51781fec", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.133Z", "modified": "2020-06-19T19:13:48.133Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "139.162.118.185", "x_com_aws_remote_city_name": "Tokyo", "x_com_aws_remote_country_name": "Japan" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T19:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T19:00:13Z", "number_observed": 1 }, { "id": "observed-data--971e6e44-1eef-47f1-b33e-a11ab678ce97", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.135Z", "modified": "2020-06-19T19:13:48.135Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.77.219", "x_com_aws_remote_city_name": "Roost", "x_com_aws_remote_country_name": "Luxembourg" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T18:45:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T18:25:13Z", "number_observed": 1 }, { "id": "observed-data--a5aac950-2dfc-4843-bb14-8a6bffdb548f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.136Z", "modified": "2020-06-19T19:13:48.136Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "198.108.67.18", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T18:30:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T18:00:12Z", "number_observed": 1 }, { "id": "observed-data--7742161b-26a7-4c35-b1b5-57d5e9faddef", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.137Z", "modified": "2020-06-19T19:13:48.137Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "124.65.18.102", "x_com_aws_remote_city_name": "Beijing", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T18:15:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T17:45:12Z", "number_observed": 1 }, { "id": "observed-data--9ae3b67a-f05c-4ad7-af09-7df14beb96bb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.139Z", "modified": "2020-06-19T19:13:48.139Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "46.99.151.239", "x_com_aws_remote_country_name": "Albania" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T18:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T17:36:12Z", "number_observed": 1 }, { "id": "observed-data--7a56696c-dcf4-492a-b02e-829cbe0cecbd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.140Z", "modified": "2020-06-19T19:13:48.140Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "network-traffic", "src_ref": "1", "dst_ref": "5", "dst_port": 38272, "src_port": 22, "protocols": [ "tcp" ] }, "3": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "4" ] }, "4": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "5": { "type": "ipv4-addr", "value": "54.211.72.189", "x_com_aws_remote_city_name": "Ashburn", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "x_com_aws_guardduty_finding": { "id": "6eb6e844fc14b1ed36e304cce7685bcf", "type": "UnauthorizedAccess:EC2/SSHBruteForce", "severity": 2, "title": "54.211.72.189 is performing SSH brute force attacks against i-0b8fd03ade35c681d. ", "timestamp": "2019-10-15T17:55:04.000Z" }, "first_observed": "2019-10-15T17:29:14Z", "last_observed": "2019-10-15T17:30:12Z", "number_observed": 1 }, { "id": "observed-data--d3d42e8e-58ed-4e6d-8bce-836b4d5f637a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.141Z", "modified": "2020-06-19T19:13:48.141Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "178.140.255.103", "x_com_aws_remote_city_name": "Moscow", "x_com_aws_remote_country_name": "Russia" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T17:00:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T16:32:11Z", "number_observed": 1 }, { "id": "observed-data--98878102-6db2-4ef9-afcc-106b45894218", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.143Z", "modified": "2020-06-19T19:13:48.143Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.73.176", "x_com_aws_remote_city_name": "Phoenix", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T13:45:02.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T13:25:08Z", "number_observed": 1 }, { "id": "observed-data--f49ff8ee-5a90-4aa8-83ee-96a4a90dbf41", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.144Z", "modified": "2020-06-19T19:13:48.144Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "60.184.128.163", "x_com_aws_remote_city_name": "Lishui", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T13:00:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T12:45:08Z", "number_observed": 1 }, { "id": "observed-data--896372a4-7139-4330-b29a-d92384cd2067", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.145Z", "modified": "2020-06-19T19:13:48.145Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.73.176", "x_com_aws_remote_city_name": "Phoenix", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T12:45:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T12:12:07Z", "number_observed": 1 }, { "id": "observed-data--a1c4db3e-db86-4a14-a7fc-f4c732358357", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.147Z", "modified": "2020-06-19T19:13:48.147Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "157.245.96.68", "x_com_aws_remote_city_name": "Bengaluru", "x_com_aws_remote_country_name": "India" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T12:15:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T11:41:07Z", "number_observed": 1 }, { "id": "observed-data--fdeb3f5a-82c0-4bc0-802a-5330581199d3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.148Z", "modified": "2020-06-19T19:13:48.148Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "111.53.76.186", "x_com_aws_remote_city_name": "Yuncheng", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T12:07:04.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T06:41:01Z", "number_observed": 1 }, { "id": "observed-data--72f15009-6729-4179-a736-cf226f41c8ff", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.149Z", "modified": "2020-06-19T19:13:48.149Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "180.117.126.46", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T12:00:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T11:30:07Z", "number_observed": 1 }, { "id": "observed-data--c8c60ee2-7af4-462b-93f1-210f60cb34c1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.150Z", "modified": "2020-06-19T19:13:48.150Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "157.245.96.68", "x_com_aws_remote_city_name": "Bengaluru", "x_com_aws_remote_country_name": "India" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T10:30:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T10:02:05Z", "number_observed": 1 }, { "id": "observed-data--d28f89f3-b57a-48a9-889c-25f69e9a67d5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.152Z", "modified": "2020-06-19T19:13:48.152Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "124.65.18.102", "x_com_aws_remote_city_name": "Beijing", "x_com_aws_remote_country_name": "China" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T10:15:01.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T09:46:05Z", "number_observed": 1 }, { "id": "observed-data--9bf32a49-dd7a-4ab9-b6c5-130879e287cf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.153Z", "modified": "2020-06-19T19:13:48.153Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.73.176", "x_com_aws_remote_city_name": "Phoenix", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T09:15:05.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T08:50:04Z", "number_observed": 1 }, { "id": "observed-data--fa918923-e0e5-4e30-9003-1ee79f3a5c6e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.154Z", "modified": "2020-06-19T19:13:48.154Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "171.67.70.80", "x_com_aws_remote_city_name": "Stanford", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T09:00:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T08:31:03Z", "number_observed": 1 }, { "id": "observed-data--ef9ba719-020a-4cd5-89c1-0fea4bcda3c1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:48.155Z", "modified": "2020-06-19T19:13:48.155Z", "objects": { "0": { "type": "domain-name", "value": "ip-172-31-88-63.ec2.internal", "resolves_to_refs": [ "1" ] }, "1": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "private" }, "2": { "type": "domain-name", "value": "ec2-54-211-223-78.compute-1.amazonaws.com", "resolves_to_refs": [ "3" ] }, "3": { "type": "ipv4-addr", "value": "54.211.223.78", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f", "x_com_aws_ip_type": "public" }, "4": { "type": "ipv4-addr", "value": "104.244.73.176", "x_com_aws_remote_city_name": "Phoenix", "x_com_aws_remote_country_name": "United States" } }, "x_com_aws_instance": { "instance_id": "i-0b8fd03ade35c681d", "availability_zone": "us-east-1b", "image_id": "ami-04763b3055de4860b" }, "x_com_aws_vpc": { "subnet_id": "subnet-c62a11e8", "vpc_id": "vpc-10db926a", "security_group_name": "launch-wizard-1", "security_group_id": "sg-0aa89ff4646f71594" }, "x_com_aws_guardduty_finding": { "probe_port": 22, "id": "9ab6e702ba673b8f1f3323956f0759d9", "type": "Recon:EC2/PortProbeUnprotectedPort", "severity": 2, "title": "Unprotected port on EC2 instance i-0b8fd03ade35c681d is being probed.", "timestamp": "2019-10-15T08:00:00.000Z" }, "x_com_aws": { "account_id": "979326520502", "region": "us-east-1" }, "first_observed": "2019-10-15T05:50:08Z", "last_observed": "2019-10-15T07:41:02Z", "number_observed": 1 }, { "id": "observed-data--e8d37afd-cd79-42d4-b48f-e4b67992bdfb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.307Z", "modified": "2020-06-19T19:13:16.307Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60642, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c19ff9d9-ea4d-470f-8579-8f4869d44529", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.310Z", "modified": "2020-06-19T19:13:16.310Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.153.198.196", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50190, "dst_port": 44442, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--10291195-427d-4ffd-b5d9-c8e8b834d7ee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.310Z", "modified": "2020-06-19T19:13:16.310Z", "objects": { "0": { "type": "ipv4-addr", "value": "183.88.24.220", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 23196, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--800a3a30-ffcf-4df3-9c09-ef701ac0607f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.310Z", "modified": "2020-06-19T19:13:16.310Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60640, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--003ce63e-6d1c-4ac3-a6f3-91487b0361b9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.310Z", "modified": "2020-06-19T19:13:16.310Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60642, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--af14286c-a0cc-409c-80b8-2f6f9b1349c1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.310Z", "modified": "2020-06-19T19:13:16.310Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56538, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.66" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a4930606-dfb3-4da4-82de-53ba99ce35e9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.310Z", "modified": "2020-06-19T19:13:16.310Z", "objects": { "0": { "type": "ipv4-addr", "value": "159.89.81.3", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39120, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--252235a0-490c-4c77-896d-0047b95ceeed", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.311Z", "modified": "2020-06-19T19:13:16.311Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60640, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--11eff126-94a4-4094-b2a7-717e959f7560", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.311Z", "modified": "2020-06-19T19:13:16.311Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 39120, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "159.89.81.3" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cd653b10-83c5-44ec-bc80-e34349ea2210", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.311Z", "modified": "2020-06-19T19:13:16.311Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.72.250", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43606, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cbb65aeb-7967-4d53-aaf9-bf1097e1dac4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.311Z", "modified": "2020-06-19T19:13:16.311Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56538, "protocols": [ "tcp" ], "start": "2019-10-20T10:38:13.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:38:13.000Z", "last_observed": "2019-10-20T10:38:13.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f67a8b65-d9af-495a-aa0b-503281ef7ba2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.311Z", "modified": "2020-06-19T19:13:16.311Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53820, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fdf5264b-4d51-45af-bcd8-acd826583c59", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.312Z", "modified": "2020-06-19T19:13:16.312Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53820, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bc9a0eb1-0b13-45e8-b1ab-4a8282115b78", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.312Z", "modified": "2020-06-19T19:13:16.312Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.230.27.9", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43387, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9646e341-b79d-4b43-81d0-23f9e3109248", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.312Z", "modified": "2020-06-19T19:13:16.312Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.153.198.150", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49698, "dst_port": 3403, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f14c5bb2-da0c-4db8-9874-348685414df4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.312Z", "modified": "2020-06-19T19:13:16.312Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53822, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1c31fc4b-9784-404c-887c-33d21928d6cb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.312Z", "modified": "2020-06-19T19:13:16.312Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53822, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ca5cbc59-559a-431e-8485-15a8cfc9c0ea", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.312Z", "modified": "2020-06-19T19:13:16.312Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35054, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--87e38da2-62d2-48d1-8004-b68b1e672479", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.313Z", "modified": "2020-06-19T19:13:16.313Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35054, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:37:10.000Z", "end": "2019-10-20T10:39:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-20T10:37:10.000Z", "last_observed": "2019-10-20T10:37:10.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a863ad88-b9e0-4f67-b01d-053df87c2fc8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.313Z", "modified": "2020-06-19T19:13:16.313Z", "objects": { "0": { "type": "ipv4-addr", "value": "71.6.165.200", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 14898, "dst_port": 5222, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--14235349-c499-414f-9cc4-0ecd46c75be5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.313Z", "modified": "2020-06-19T19:13:16.313Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60628, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5d8aef2f-a4bc-47fa-8938-c13206941e9f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.313Z", "modified": "2020-06-19T19:13:16.313Z", "objects": { "0": { "type": "ipv4-addr", "value": "71.6.233.109", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 7548, "dst_port": 7548, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a4bbee2d-a3c0-48d5-a73e-02f4e52ffd7e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.313Z", "modified": "2020-06-19T19:13:16.313Z", "objects": { "0": { "type": "ipv4-addr", "value": "104.197.98.229", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47721, "dst_port": 5900, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f0c69fcb-31bc-4986-9dca-cc6921d29b1b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.314Z", "modified": "2020-06-19T19:13:16.314Z", "objects": { "0": { "type": "ipv4-addr", "value": "179.56.135.222", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 30952, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--df37234b-99b9-4015-8618-fa427b87866b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.314Z", "modified": "2020-06-19T19:13:16.314Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60628, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--762add8d-e9b4-4871-a5f7-33d866a5783b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.314Z", "modified": "2020-06-19T19:13:16.314Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60630, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5047cd6b-91c5-46c9-9519-9b449f415f23", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.314Z", "modified": "2020-06-19T19:13:16.314Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36784, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.38" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6dbdfaa2-42b8-43de-a788-477e86a1046b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.314Z", "modified": "2020-06-19T19:13:16.314Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.38", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 36784, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dbb93914-4b78-4bd8-91d4-b02844072b7d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.315Z", "modified": "2020-06-19T19:13:16.315Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60630, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:36:09.000Z", "end": "2019-10-20T10:38:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T10:36:09.000Z", "last_observed": "2019-10-20T10:36:09.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b8ba3e6e-8e38-44fe-aad6-aef7c2e7b6a1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.315Z", "modified": "2020-06-19T19:13:16.315Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35610, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f12cc401-0644-4af4-b902-4f12fdb844da", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.315Z", "modified": "2020-06-19T19:13:16.315Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 34628, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--867eabd8-b896-4f85-af22-7065f9cd0e83", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.315Z", "modified": "2020-06-19T19:13:16.315Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59386, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ce1c1fd8-d41a-42e0-babd-2f8e771db4b7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.315Z", "modified": "2020-06-19T19:13:16.315Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34628, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0de3f257-93ce-4321-a12f-9ea3f2e6ba59", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.316Z", "modified": "2020-06-19T19:13:16.316Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60620, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b7767dcb-daa0-452e-bd6a-2e8df2ee2b4a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.316Z", "modified": "2020-06-19T19:13:16.316Z", "objects": { "0": { "type": "ipv4-addr", "value": "159.203.197.32", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59735, "dst_port": 30407, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3698daa3-a653-41b4-bbba-54eeb947a26d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.316Z", "modified": "2020-06-19T19:13:16.316Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59386, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cf740a1a-9b64-42e4-a587-4695a11703e0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.316Z", "modified": "2020-06-19T19:13:16.316Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60620, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7d92ff4c-09e0-483c-8bce-fbf871d2440a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.316Z", "modified": "2020-06-19T19:13:16.316Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35610, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:36:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6425fc85-594c-4196-84f6-850fc8893697", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.317Z", "modified": "2020-06-19T19:13:16.317Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 39466, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--111e0006-b4e8-4672-bf4d-0d2c2614a09d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.317Z", "modified": "2020-06-19T19:13:16.317Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60624, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5ca4a85f-7f8b-44f0-ace4-6d9b2e95ab71", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.317Z", "modified": "2020-06-19T19:13:16.317Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60624, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d2fbb219-a494-4d5f-9442-526b3b050fa2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.317Z", "modified": "2020-06-19T19:13:16.317Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39466, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T10:35:11.000Z", "end": "2019-10-20T10:37:08.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-20T10:35:11.000Z", "last_observed": "2019-10-20T10:35:11.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0289d9ee-97ac-46db-8d1c-56068aaff044", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.317Z", "modified": "2020-06-19T19:13:16.317Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43614, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.157.70" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--72298397-3d88-45e8-bc48-9d766f6c0c28", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.317Z", "modified": "2020-06-19T19:13:16.317Z", "objects": { "0": { "type": "ipv4-addr", "value": "23.254.229.111", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45023, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--94d78fdc-e21f-4191-a5c3-8e7e573e3fe1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.318Z", "modified": "2020-06-19T19:13:16.318Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52638, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--27316280-0d37-48a9-99bc-416c641c3b70", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.318Z", "modified": "2020-06-19T19:13:16.318Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.119.160.6", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 8080, "dst_port": 33098, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--aa4582ac-75ce-4bd0-b3c1-2b84cb65c9a5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.318Z", "modified": "2020-06-19T19:13:16.318Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58220, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e309d3ea-0fc9-4624-82f3-d6e414b14edb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.318Z", "modified": "2020-06-19T19:13:16.318Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52638, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--206eb0c7-9433-4d77-a50f-bf35d91e7e2f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.318Z", "modified": "2020-06-19T19:13:16.318Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33862, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9091ba54-76c1-4561-ae8c-6cfd2d8f708e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.318Z", "modified": "2020-06-19T19:13:16.318Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33862, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7c9a8032-9643-4c56-bdcb-2df3ffa1d058", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.319Z", "modified": "2020-06-19T19:13:16.319Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58220, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b51e4dd0-adb9-4ce1-82f0-cb7b01f51af2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.319Z", "modified": "2020-06-19T19:13:16.319Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.157.70", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 43614, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2999efe6-1061-407d-a0be-2d7bbf7b9b3b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.319Z", "modified": "2020-06-19T19:13:16.319Z", "objects": { "0": { "type": "ipv4-addr", "value": "58.215.75.134", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52387, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T08:23:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:23:07.000Z", "last_observed": "2019-10-20T08:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4d2194f2-da58-44d8-bbb7-df87900986a7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.319Z", "modified": "2020-06-19T19:13:16.319Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52628, "protocols": [ "tcp" ], "start": "2019-10-20T08:22:07.000Z", "end": "2019-10-20T08:23:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:22:07.000Z", "last_observed": "2019-10-20T08:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--751022d9-c951-443c-b5bb-baed7db65ac8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.319Z", "modified": "2020-06-19T19:13:16.319Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.118.37.86", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55357, "dst_port": 358, "protocols": [ "tcp" ], "start": "2019-10-20T08:22:07.000Z", "end": "2019-10-20T08:23:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:22:07.000Z", "last_observed": "2019-10-20T08:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9ca781f6-c898-4d14-848e-81dc1d9e8f2c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.320Z", "modified": "2020-06-19T19:13:16.320Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52628, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:22:07.000Z", "end": "2019-10-20T08:23:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T08:22:07.000Z", "last_observed": "2019-10-20T08:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--85d001e1-6993-45bb-8f6d-4f6689f272c3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.320Z", "modified": "2020-06-19T19:13:16.320Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.60", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 32944, "protocols": [ "tcp" ], "start": "2019-10-20T08:22:07.000Z", "end": "2019-10-20T08:23:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:22:07.000Z", "last_observed": "2019-10-20T08:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--541e287f-e14d-4541-90a0-1c04cc2bfe8f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.320Z", "modified": "2020-06-19T19:13:16.320Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32944, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:22:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-20T08:22:07.000Z", "last_observed": "2019-10-20T08:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c3e7a4c9-1fb5-4fc1-9245-c379dd55be9b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.320Z", "modified": "2020-06-19T19:13:16.320Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58214, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:22:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T08:22:07.000Z", "last_observed": "2019-10-20T08:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b631b6f8-9d01-4af7-ac76-949f2a9a5b41", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.321Z", "modified": "2020-06-19T19:13:16.321Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58214, "protocols": [ "tcp" ], "start": "2019-10-20T08:22:07.000Z", "end": "2019-10-20T08:24:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:22:07.000Z", "last_observed": "2019-10-20T08:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7ec97595-c975-48e7-b483-fd56ed1ba819", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.321Z", "modified": "2020-06-19T19:13:16.321Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58206, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7f452959-4d0f-4a14-a7dc-9d62e20a0ba6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.321Z", "modified": "2020-06-19T19:13:16.321Z", "objects": { "0": { "type": "ipv4-addr", "value": "178.46.210.1", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 2064, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--878fd70e-becf-4d4c-9954-66a18352e32a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.321Z", "modified": "2020-06-19T19:13:16.321Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 34426, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4f40fdd9-b24a-4d0d-a3d2-ba6616523df8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.321Z", "modified": "2020-06-19T19:13:16.321Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38426, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0a2cd3de-65fe-4641-bb85-8db8607c2f7a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.322Z", "modified": "2020-06-19T19:13:16.322Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.53.65.40", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41007, "dst_port": 5533, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8780f43a-84c1-4935-8bbe-c035015c36d5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.322Z", "modified": "2020-06-19T19:13:16.322Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58206, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0f2f64fd-ace9-446e-af7d-2244d2bbf07f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.322Z", "modified": "2020-06-19T19:13:16.322Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34426, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:23:06.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4ffc056f-de91-4d00-9b75-a1eb4efe0613", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.322Z", "modified": "2020-06-19T19:13:16.322Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52624, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:23:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4d78d5b6-1303-4e7b-a126-1ea6914e728b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.322Z", "modified": "2020-06-19T19:13:16.322Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52624, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:21:07.000Z", "end": "2019-10-20T08:23:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T08:21:07.000Z", "last_observed": "2019-10-20T08:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6abadf1b-6a96-427d-b7a1-36fe80218fd5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.323Z", "modified": "2020-06-19T19:13:16.323Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.144.93", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 42650, "protocols": [ "tcp" ], "start": "2019-10-20T08:20:07.000Z", "end": "2019-10-20T08:21:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:20:07.000Z", "last_observed": "2019-10-20T08:20:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--edb36311-5185-432b-8982-07015c5b2a57", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.323Z", "modified": "2020-06-19T19:13:16.323Z", "objects": { "0": { "type": "ipv4-addr", "value": "77.247.110.97", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59596, "dst_port": 5038, "protocols": [ "tcp" ], "start": "2019-10-20T08:20:07.000Z", "end": "2019-10-20T08:21:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:20:07.000Z", "last_observed": "2019-10-20T08:20:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9221975c-d36a-4f03-bc89-d75f5c0543e7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.323Z", "modified": "2020-06-19T19:13:16.323Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59430, "protocols": [ "tcp" ], "start": "2019-10-20T08:20:07.000Z", "end": "2019-10-20T08:21:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:20:07.000Z", "last_observed": "2019-10-20T08:20:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--65d97fe7-8ebc-451a-baa9-192eef3e9178", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.324Z", "modified": "2020-06-19T19:13:16.324Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59430, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:20:07.000Z", "end": "2019-10-20T08:21:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T08:20:07.000Z", "last_observed": "2019-10-20T08:20:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d725a325-4acf-4b3e-826b-1170ac55092c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.324Z", "modified": "2020-06-19T19:13:16.324Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58202, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:20:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T08:20:07.000Z", "last_observed": "2019-10-20T08:20:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--92d348e4-9785-4366-8200-6925ae62d8de", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.324Z", "modified": "2020-06-19T19:13:16.324Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42650, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:20:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.144.93" } }, "first_observed": "2019-10-20T08:20:07.000Z", "last_observed": "2019-10-20T08:20:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--43e87cde-2ea2-4f07-9b54-3028e52f0b0d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.324Z", "modified": "2020-06-19T19:13:16.324Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58202, "protocols": [ "tcp" ], "start": "2019-10-20T08:20:07.000Z", "end": "2019-10-20T08:22:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:20:07.000Z", "last_observed": "2019-10-20T08:20:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--12e15d18-3eba-42a5-8202-8b892d8709d6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.324Z", "modified": "2020-06-19T19:13:16.324Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32918, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b1483ea4-3607-4ea7-a978-93c0bcb55add", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.324Z", "modified": "2020-06-19T19:13:16.324Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52598, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0dd02e53-48bf-4b50-bb64-f5d0bea16e7b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.325Z", "modified": "2020-06-19T19:13:16.325Z", "objects": { "0": { "type": "ipv4-addr", "value": "188.158.201.53", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51484, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--56d6e425-84e7-4a0e-a034-1277427cb7d8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.325Z", "modified": "2020-06-19T19:13:16.325Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52610, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--239016c3-2c26-4540-90cb-55464c10309c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.325Z", "modified": "2020-06-19T19:13:16.325Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 36482, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "51.83.73.48" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--094b111d-9eda-4874-932c-be1d561e04e3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.325Z", "modified": "2020-06-19T19:13:16.325Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52598, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bd926bb1-ae0a-4943-8ba0-b8a10a265e11", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.325Z", "modified": "2020-06-19T19:13:16.325Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.165", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44069, "dst_port": 5741, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d4af1ca8-d566-44b4-8dbc-d289e084579c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.325Z", "modified": "2020-06-19T19:13:16.325Z", "objects": { "0": { "type": "ipv4-addr", "value": "73.125.170.149", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 30987, "dst_port": 81, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cd1400c4-1266-4389-9ef8-bdb702636881", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.326Z", "modified": "2020-06-19T19:13:16.326Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.83.73.48", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36482, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7c35917d-c7ff-46d7-b7fd-0edc31a0305a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.326Z", "modified": "2020-06-19T19:13:16.326Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52610, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fb33e051-fdaf-45ff-bf9b-28b23a6a2717", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.326Z", "modified": "2020-06-19T19:13:16.326Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.60", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 32918, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--28ab8e29-5adc-4457-affd-e8b99ae508cf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.326Z", "modified": "2020-06-19T19:13:16.326Z", "objects": { "0": { "type": "ipv4-addr", "value": "181.48.128.83", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 19649, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:20:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1483bd19-8450-4923-a0cf-ed03eb49552d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.326Z", "modified": "2020-06-19T19:13:16.326Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59426, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:21:06.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--26e436c2-1bcf-4405-8fa3-23ac14ea7deb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.326Z", "modified": "2020-06-19T19:13:16.326Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59426, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T08:19:06.000Z", "end": "2019-10-20T08:21:06.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T08:19:06.000Z", "last_observed": "2019-10-20T08:19:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--734252d9-8c18-4b63-bb0e-9fc306a9a823", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.327Z", "modified": "2020-06-19T19:13:16.327Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52410, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:54:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:54:07.000Z", "last_observed": "2019-10-20T07:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--37705fe3-2753-4a2a-b9ad-54b55a17d792", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.327Z", "modified": "2020-06-19T19:13:16.327Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56188, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:54:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.125" } }, "first_observed": "2019-10-20T07:54:07.000Z", "last_observed": "2019-10-20T07:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cb72b356-c629-4600-b098-7bffe61065f8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.327Z", "modified": "2020-06-19T19:13:16.327Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.125", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56188, "protocols": [ "tcp" ], "start": "2019-10-20T07:54:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:54:07.000Z", "last_observed": "2019-10-20T07:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f6f22872-6894-470f-b96f-b92ecf64601e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.327Z", "modified": "2020-06-19T19:13:16.327Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52412, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:54:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:54:07.000Z", "last_observed": "2019-10-20T07:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8028e606-5ded-4173-96df-c9723a5b854b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.327Z", "modified": "2020-06-19T19:13:16.327Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52410, "protocols": [ "tcp" ], "start": "2019-10-20T07:54:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:54:07.000Z", "last_observed": "2019-10-20T07:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a48ec68f-9063-4a2f-9cf1-40a4e5f1d8fa", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.327Z", "modified": "2020-06-19T19:13:16.327Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52412, "protocols": [ "tcp" ], "start": "2019-10-20T07:54:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:54:07.000Z", "last_observed": "2019-10-20T07:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--65686322-10be-46ff-a3c4-c675493653e3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.328Z", "modified": "2020-06-19T19:13:16.328Z", "objects": { "0": { "type": "ipv4-addr", "value": "14.50.28.84", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 9786, "dst_port": 85, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ae4e5b32-5bfd-4aa5-8c93-69a4b4090afc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.328Z", "modified": "2020-06-19T19:13:16.328Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52396, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7b0bbc31-023c-491a-807b-826034800ea0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.328Z", "modified": "2020-06-19T19:13:16.328Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52396, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d8c5ecae-c5fc-4fab-8ff4-3a723f30a8e4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.328Z", "modified": "2020-06-19T19:13:16.328Z", "objects": { "0": { "type": "ipv4-addr", "value": "178.73.215.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47902, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--21d80ced-0beb-4cbf-a727-9e32576d55f8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.328Z", "modified": "2020-06-19T19:13:16.328Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34200, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--467f90fb-c95e-424b-857c-f19a438d10bc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.329Z", "modified": "2020-06-19T19:13:16.329Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 34200, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--15d3eeeb-9318-42f0-8eb0-547e0c495836", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.329Z", "modified": "2020-06-19T19:13:16.329Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.105.192.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54295, "dst_port": 9089, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1ce51336-7610-4486-ad20-a605b77ef06c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.329Z", "modified": "2020-06-19T19:13:16.329Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52398, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bba0a2a3-d5e4-44c0-8eda-85da4cd8a1c8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.329Z", "modified": "2020-06-19T19:13:16.329Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52398, "protocols": [ "tcp" ], "start": "2019-10-20T07:53:07.000Z", "end": "2019-10-20T07:55:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:53:07.000Z", "last_observed": "2019-10-20T07:53:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4f16d8ac-0bf2-459a-ba54-c15f1127c97e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.329Z", "modified": "2020-06-19T19:13:16.329Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52390, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:53:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e23851d7-5da8-4550-8d18-a160ed353526", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.330Z", "modified": "2020-06-19T19:13:16.330Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.125", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56176, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:53:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4f83a5af-7d69-45ec-b95c-3d3c4a1c2500", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.330Z", "modified": "2020-06-19T19:13:16.330Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52390, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:53:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0718ac14-9246-4e9f-a521-234eeda87a25", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.330Z", "modified": "2020-06-19T19:13:16.330Z", "objects": { "0": { "type": "ipv4-addr", "value": "31.14.40.251", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36147, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:53:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--953db805-ee91-449f-8e42-71a94a1ed351", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.330Z", "modified": "2020-06-19T19:13:16.330Z", "objects": { "0": { "type": "ipv4-addr", "value": "91.92.188.160", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 29575, "dst_port": 8081, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:53:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fabcf90e-1dfc-4b48-8ee3-f49c1212999b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.331Z", "modified": "2020-06-19T19:13:16.331Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52392, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6510d131-f2b0-4283-90f5-adf0bc678a48", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.331Z", "modified": "2020-06-19T19:13:16.331Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56176, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.125" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b23f9c26-a380-4d61-8cc6-c9f6901b8194", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.331Z", "modified": "2020-06-19T19:13:16.331Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52392, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:52:07.000Z", "end": "2019-10-20T07:54:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:52:07.000Z", "last_observed": "2019-10-20T07:52:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--10febab3-fe89-49a5-ab04-c3186c98d7bc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.331Z", "modified": "2020-06-19T19:13:16.331Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.252", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57272, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5d3b228f-d185-49d3-b346-a2c59fe51432", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.332Z", "modified": "2020-06-19T19:13:16.332Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.202", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51574, "dst_port": 5958, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--648d1846-9c4e-4877-99bd-9418a44d7c4f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.332Z", "modified": "2020-06-19T19:13:16.332Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.94.229.96", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55882, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--45133cfd-acd1-4dfc-b0e2-f6a7cb3e8e18", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.332Z", "modified": "2020-06-19T19:13:16.332Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42085, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4f4a8f30-4981-4ccf-a770-478131ecf406", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.332Z", "modified": "2020-06-19T19:13:16.332Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57968, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0b9c8fb0-5fb2-4476-8be9-3df30ae322e0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.332Z", "modified": "2020-06-19T19:13:16.332Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55882, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "52.94.229.96" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f14d6b52-1a3b-457a-8263-81e5409db0c4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.333Z", "modified": "2020-06-19T19:13:16.333Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57968, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9788ab34-036d-4edc-a545-1a0da42b1974", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.333Z", "modified": "2020-06-19T19:13:16.333Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52386, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:53:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5595509c-8819-4ed2-a6f2-34d032965833", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.333Z", "modified": "2020-06-19T19:13:16.333Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52386, "protocols": [ "tcp" ], "start": "2019-10-20T07:51:06.000Z", "end": "2019-10-20T07:53:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:51:06.000Z", "last_observed": "2019-10-20T07:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--20a9fc27-61ed-41f2-8756-fec0210b81d7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.333Z", "modified": "2020-06-19T19:13:16.333Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59192, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9c1d06c0-d7c0-4707-b47e-2dd2a98471ff", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.333Z", "modified": "2020-06-19T19:13:16.333Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.65.74", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57660, "dst_port": 9999, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--821aa48a-702d-4b1d-b6e9-a0aa55c4e09d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.333Z", "modified": "2020-06-19T19:13:16.334Z", "objects": { "0": { "type": "ipv4-addr", "value": "34.244.218.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39766, "dst_port": 11211, "protocols": [ "udp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--73597877-e7f7-43b4-8d1a-100399b3cec2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.334Z", "modified": "2020-06-19T19:13:16.334Z", "objects": { "0": { "type": "ipv4-addr", "value": "122.228.19.80", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 5092, "dst_port": 1010, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--23d8d593-efa3-4362-a09f-4fb4981a8878", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.334Z", "modified": "2020-06-19T19:13:16.334Z", "objects": { "0": { "type": "ipv4-addr", "value": "45.136.109.82", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52217, "dst_port": 9502, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--faaab43a-4ef0-40d0-b0dc-e7137a3f833b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.334Z", "modified": "2020-06-19T19:13:16.334Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59192, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cd7e1f0b-bfee-4e14-930c-5b4bfe3c2037", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.335Z", "modified": "2020-06-19T19:13:16.335Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35750, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.141.113" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e3f82d85-aaa9-4c44-b6da-39461f5b0041", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.335Z", "modified": "2020-06-19T19:13:16.335Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.141.113", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35750, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--69f7e274-256a-4854-9522-86f6738d261d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.335Z", "modified": "2020-06-19T19:13:16.335Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57964, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--54867f5d-1c5b-4ccd-ab9b-fe06c2073511", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.335Z", "modified": "2020-06-19T19:13:16.335Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57964, "protocols": [ "tcp" ], "start": "2019-10-20T07:50:06.000Z", "end": "2019-10-20T07:52:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:50:06.000Z", "last_observed": "2019-10-20T07:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a570f852-dfce-4ddf-bc66-da8eda9c7fba", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.335Z", "modified": "2020-06-19T19:13:16.335Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52360, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--009dba45-009c-49d4-a66e-b7859513f3a3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.335Z", "modified": "2020-06-19T19:13:16.335Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55856, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "52.94.229.96" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d7b1e4d7-d219-40da-8bb8-aa9bd92ad983", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.336Z", "modified": "2020-06-19T19:13:16.336Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52360, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fcb700fb-12e4-4d18-b642-7299c8ec3c42", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.336Z", "modified": "2020-06-19T19:13:16.336Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34168, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6607988b-5851-47c1-ba99-9178188e73d7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.336Z", "modified": "2020-06-19T19:13:16.336Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50453, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--030fb5ab-b5af-41b2-9b65-e2a03670d161", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.336Z", "modified": "2020-06-19T19:13:16.336Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52372, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fdf5b489-e117-45c1-9c32-5892b5917fc6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.336Z", "modified": "2020-06-19T19:13:16.336Z", "objects": { "0": { "type": "ipv4-addr", "value": "184.105.247.211", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 29922, "dst_port": 5353, "protocols": [ "udp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2afc6c5a-ee0b-44e0-9809-07405a23c659", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.336Z", "modified": "2020-06-19T19:13:16.336Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52372, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e9dbc20a-f9e6-4de0-99bc-ac22e7177782", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.337Z", "modified": "2020-06-19T19:13:16.337Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.175.93.101", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40653, "dst_port": 5932, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8ebc7bdd-647b-4257-9bdc-0eba7a651eb6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.337Z", "modified": "2020-06-19T19:13:16.337Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 34168, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:50:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ca847fd7-5c12-4ae6-a7d7-8c7d39edec8e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.337Z", "modified": "2020-06-19T19:13:16.337Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59188, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f5d5dcbb-5d54-419e-be0b-d703cf233314", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.337Z", "modified": "2020-06-19T19:13:16.337Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59188, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:49:06.000Z", "end": "2019-10-20T07:51:05.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T07:49:06.000Z", "last_observed": "2019-10-20T07:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a89c8e6b-0476-4241-abcc-5580d983eb9f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.337Z", "modified": "2020-06-19T19:13:16.337Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55300, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "52.94.233.129" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f23bc16e-3965-4741-9bce-bab34a93fb1e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.338Z", "modified": "2020-06-19T19:13:16.338Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58938, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b81c0b4d-714a-4226-92f9-1091dde899ce", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.338Z", "modified": "2020-06-19T19:13:16.338Z", "objects": { "0": { "type": "ipv4-addr", "value": "171.249.138.65", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57240, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8e7f87b2-e0ae-46d3-9dc5-b8ad211ae65e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.338Z", "modified": "2020-06-19T19:13:16.338Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58940, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dbe4f0d4-65cf-45ff-8a6b-032db3e61a28", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.338Z", "modified": "2020-06-19T19:13:16.338Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58940, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9cc73ed8-a2d5-47fe-b7f0-12813736f23b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.338Z", "modified": "2020-06-19T19:13:16.338Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 32940, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--89013bf5-cbcf-43ec-8b59-7cfcd202870a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.338Z", "modified": "2020-06-19T19:13:16.338Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58938, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1ff84f1c-9581-4e00-98e6-789d30340ce7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.339Z", "modified": "2020-06-19T19:13:16.339Z", "objects": { "0": { "type": "ipv4-addr", "value": "202.107.227.42", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42563, "dst_port": 8080, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2ec18c8c-6cea-4815-9abe-2245616af547", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.339Z", "modified": "2020-06-19T19:13:16.339Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.94.233.129", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55300, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d6bd9b08-fb99-4a53-a485-29a44e4e82df", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.339Z", "modified": "2020-06-19T19:13:16.339Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 35440, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "51.83.73.48" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--421be21b-a316-4939-b47e-e331552823d4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.339Z", "modified": "2020-06-19T19:13:16.339Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 57240, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "171.249.138.65" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2dd00ffb-5d20-4abd-9642-381c30989acc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.339Z", "modified": "2020-06-19T19:13:16.339Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.83.73.48", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35440, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--31a18843-9f93-4666-b35e-d2b876d8d3ef", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.339Z", "modified": "2020-06-19T19:13:16.339Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32940, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:23:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-20T07:23:07.000Z", "last_observed": "2019-10-20T07:23:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d9f73d39-9b74-4504-9345-dc6f17c8ae09", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.340Z", "modified": "2020-06-19T19:13:16.340Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58932, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--463b9b79-4134-4c72-b4e6-74e0cc965393", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.340Z", "modified": "2020-06-19T19:13:16.340Z", "objects": { "0": { "type": "ipv4-addr", "value": "167.71.184.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34831, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--74320dd3-701a-4c69-9c10-e8ee4f508472", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.340Z", "modified": "2020-06-19T19:13:16.340Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.38", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35080, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--43766116-7aef-48f7-83da-08004946f757", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.340Z", "modified": "2020-06-19T19:13:16.340Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51395, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--34095e07-9a6d-4596-a76d-520f81b0bbcd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.340Z", "modified": "2020-06-19T19:13:16.340Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58930, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1fb453b0-8d99-40f5-b2f9-30cb59ede2d2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.340Z", "modified": "2020-06-19T19:13:16.340Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58930, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c43642e4-3764-4bf3-affd-bc37eb19011d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.341Z", "modified": "2020-06-19T19:13:16.341Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35080, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.38" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0d6c9a3d-da9b-40cf-bcf0-35b41bb06e80", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.341Z", "modified": "2020-06-19T19:13:16.341Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58932, "protocols": [ "tcp" ], "start": "2019-10-20T07:22:07.000Z", "end": "2019-10-20T07:24:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:22:07.000Z", "last_observed": "2019-10-20T07:22:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--037c8322-1e47-43f1-8bdf-bdc5f05fd146", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.341Z", "modified": "2020-06-19T19:13:16.341Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.162.168", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 8080, "dst_port": 1001, "protocols": [ "tcp" ], "start": "2019-10-20T07:21:07.000Z", "end": "2019-10-20T07:22:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:21:07.000Z", "last_observed": "2019-10-20T07:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dd6b0f32-4b87-4ec0-a96b-778f522432d4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.341Z", "modified": "2020-06-19T19:13:16.341Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33460, "protocols": [ "tcp" ], "start": "2019-10-20T07:21:07.000Z", "end": "2019-10-20T07:22:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:21:07.000Z", "last_observed": "2019-10-20T07:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--58e32f47-b338-4d49-85c4-270b9d37143d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.341Z", "modified": "2020-06-19T19:13:16.341Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57694, "protocols": [ "tcp" ], "start": "2019-10-20T07:21:07.000Z", "end": "2019-10-20T07:22:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:21:07.000Z", "last_observed": "2019-10-20T07:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2c504239-4a2a-4b88-972a-2570f0ec3037", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.341Z", "modified": "2020-06-19T19:13:16.341Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57694, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:21:07.000Z", "end": "2019-10-20T07:22:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T07:21:07.000Z", "last_observed": "2019-10-20T07:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3d5ac6f0-b5ca-414a-90c4-f0c4689c2110", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.342Z", "modified": "2020-06-19T19:13:16.342Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58926, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:21:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T07:21:07.000Z", "last_observed": "2019-10-20T07:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--42da138e-e716-425d-817a-8869f626e022", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.342Z", "modified": "2020-06-19T19:13:16.342Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33460, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:21:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-20T07:21:07.000Z", "last_observed": "2019-10-20T07:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--777a6823-27b0-4b6c-b312-008d2161a507", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.342Z", "modified": "2020-06-19T19:13:16.342Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58926, "protocols": [ "tcp" ], "start": "2019-10-20T07:21:07.000Z", "end": "2019-10-20T07:23:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:21:07.000Z", "last_observed": "2019-10-20T07:21:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cd335596-799e-40d4-bffb-46a14b13b332", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.342Z", "modified": "2020-06-19T19:13:16.342Z", "objects": { "0": { "type": "ipv4-addr", "value": "37.49.227.109", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43329, "dst_port": 81, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eb3aa7f5-c82e-4597-acd3-5473b79e78e8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.342Z", "modified": "2020-06-19T19:13:16.342Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52104, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f60c3e62-b087-468a-9ed6-e8f0dd8db50c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.343Z", "modified": "2020-06-19T19:13:16.343Z", "objects": { "0": { "type": "ipv4-addr", "value": "125.59.44.138", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60719, "dst_port": 5555, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3955cac6-427d-4c75-b24d-9da0072212b4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.343Z", "modified": "2020-06-19T19:13:16.343Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52104, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9f7965bf-372d-4b43-8671-3a6922da0671", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.343Z", "modified": "2020-06-19T19:13:16.343Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.144.93", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 42138, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bc5a25d5-0ef1-4203-91f8-35322065eb07", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.343Z", "modified": "2020-06-19T19:13:16.343Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42138, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.144.93" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1d3cc4b7-45b9-4059-8d2f-4d41d7a7591f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.344Z", "modified": "2020-06-19T19:13:16.344Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57690, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:22:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a8abcc90-d94d-45a4-a4ff-71875f511823", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.344Z", "modified": "2020-06-19T19:13:16.344Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57690, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:20:04.000Z", "end": "2019-10-20T07:22:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T07:20:04.000Z", "last_observed": "2019-10-20T07:20:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8895e0cb-84ea-4bb1-bfad-3daf5c23c76b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.344Z", "modified": "2020-06-19T19:13:16.344Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52098, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b2ef2b71-0256-4446-8399-d35083ce6ec9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.344Z", "modified": "2020-06-19T19:13:16.344Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32908, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3ef5555a-6ed3-4aa2-925c-276f3ea12b70", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.344Z", "modified": "2020-06-19T19:13:16.344Z", "objects": { "0": { "type": "ipv4-addr", "value": "199.19.224.191", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35614, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--147907ac-b772-42f0-bb3a-7933b2ee151b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.345Z", "modified": "2020-06-19T19:13:16.345Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.122.184.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49397, "dst_port": 8000, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9343670b-d9a1-4c9d-9331-c7c97702c2cd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.345Z", "modified": "2020-06-19T19:13:16.345Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52086, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a07b0628-502d-467b-b05e-c72c29eca129", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.345Z", "modified": "2020-06-19T19:13:16.345Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52098, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a8c6711b-a008-4e4a-8434-d8554cb64a0a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.345Z", "modified": "2020-06-19T19:13:16.345Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52086, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--39989621-93f7-4c83-8348-71ba433da09f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.345Z", "modified": "2020-06-19T19:13:16.345Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 35614, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "199.19.224.191" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--99f27b04-fb1b-4ef8-a1a1-81bfe2f16e0d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.346Z", "modified": "2020-06-19T19:13:16.346Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 32908, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cb82768b-b8ea-41f9-b56a-f3e9bd9ab591", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.346Z", "modified": "2020-06-19T19:13:16.346Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.230", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34912, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:20:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--00c60691-e41b-478a-b913-fc605de4c11b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.346Z", "modified": "2020-06-19T19:13:16.346Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52100, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5069fb2d-32c3-45dc-abf1-68fa6d1df26b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.346Z", "modified": "2020-06-19T19:13:16.346Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52100, "protocols": [ "tcp" ], "start": "2019-10-20T07:19:07.000Z", "end": "2019-10-20T07:21:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T07:19:07.000Z", "last_observed": "2019-10-20T07:19:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2fbe0780-fd04-4256-83a4-a5cda5317e2f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.346Z", "modified": "2020-06-19T19:13:16.346Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.175.93.18", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49866, "dst_port": 3279, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cdb1b321-b3e3-4fd4-9725-2da4877dc8fc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.346Z", "modified": "2020-06-19T19:13:16.346Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47502, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0b7fa24d-f5e7-4b5f-8490-d74540e4262e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.347Z", "modified": "2020-06-19T19:13:16.347Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.88.240.4", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45575, "dst_port": 161, "protocols": [ "udp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1d737928-74ab-4ef7-bd1e-c1e36694e2ad", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.347Z", "modified": "2020-06-19T19:13:16.347Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47502, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--aa1e3672-5f96-47d9-8b64-acb175eda7f2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.347Z", "modified": "2020-06-19T19:13:16.347Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56615, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--565eedcd-79cb-4895-aaff-9187b854ea4c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.347Z", "modified": "2020-06-19T19:13:16.347Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58714, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5b8e1fa3-826d-43e0-ab34-94ef348fcd97", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.348Z", "modified": "2020-06-19T19:13:16.348Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57482, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3506d31e-c981-4422-825b-40649dda6895", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.348Z", "modified": "2020-06-19T19:13:16.348Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57482, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--745e4cbb-22d8-412b-8b34-eb79b3826629", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.348Z", "modified": "2020-06-19T19:13:16.348Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58714, "protocols": [ "tcp" ], "start": "2019-10-20T06:54:07.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:54:07.000Z", "last_observed": "2019-10-20T06:54:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--72c35500-06d0-4c4f-b1c7-34f918949aea", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.348Z", "modified": "2020-06-19T19:13:16.348Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57470, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4c864a6d-bac1-49e3-9039-8b11b98f48df", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.349Z", "modified": "2020-06-19T19:13:16.349Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57470, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:55:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cd21b7e3-2bfd-48e6-a052-457daa98a7cd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.349Z", "modified": "2020-06-19T19:13:16.349Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58698, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bd4884b8-62cc-4cc1-bede-4c7b5bb398c3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.349Z", "modified": "2020-06-19T19:13:16.349Z", "objects": { "0": { "type": "ipv4-addr", "value": "61.243.39.70", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 21124, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ef7d66fb-3fc1-4738-af94-e421ddda4477", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.349Z", "modified": "2020-06-19T19:13:16.349Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33688, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fbb8d2aa-bc8b-4c8e-a3cd-20a1be327642", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.350Z", "modified": "2020-06-19T19:13:16.350Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33688, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ba885d5e-57bd-4135-add3-d1fd999ae37e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.350Z", "modified": "2020-06-19T19:13:16.350Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58698, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2365e1a1-2435-4ede-a3c1-a93c98653082", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.351Z", "modified": "2020-06-19T19:13:16.351Z", "objects": { "0": { "type": "ipv4-addr", "value": "212.42.104.18", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47431, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--88fb05c6-263b-450d-9a25-881d856fbdf5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.351Z", "modified": "2020-06-19T19:13:16.351Z", "objects": { "0": { "type": "ipv4-addr", "value": "192.99.10.122", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32767, "dst_port": 8545, "protocols": [ "tcp" ], "start": "2019-10-20T06:53:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:53:06.000Z", "last_observed": "2019-10-20T06:53:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d859318e-1b0e-44c9-9496-8329a48618c9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.351Z", "modified": "2020-06-19T19:13:16.351Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33106, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--58b06e74-46e2-4b1e-83c0-fb9ef2105311", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.351Z", "modified": "2020-06-19T19:13:16.351Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58694, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6bc72924-761f-4a73-a873-ec7661e5cb6a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.351Z", "modified": "2020-06-19T19:13:16.351Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58694, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:54:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--64fcba51-c02c-48a5-8f74-5d30d0141055", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.351Z", "modified": "2020-06-19T19:13:16.351Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.48", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57810, "dst_port": 6252, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:53:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--43879c20-7217-4da7-acf9-44e99f8c3397", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.352Z", "modified": "2020-06-19T19:13:16.352Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51878, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:53:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5bc2090e-4dec-41b6-ad7c-11d45e3e45fe", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.352Z", "modified": "2020-06-19T19:13:16.352Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33106, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:53:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bb72e886-e2a5-43b9-a3ba-7644a334413d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.352Z", "modified": "2020-06-19T19:13:16.352Z", "objects": { "0": { "type": "ipv4-addr", "value": "159.203.201.190", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 37631, "dst_port": 20921, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:53:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--78cdf85e-f391-40e1-bae2-cc6c8909d58e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.352Z", "modified": "2020-06-19T19:13:16.352Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51878, "protocols": [ "tcp" ], "start": "2019-10-20T06:52:06.000Z", "end": "2019-10-20T06:53:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:52:06.000Z", "last_observed": "2019-10-20T06:52:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--150781d9-27b9-41fa-a4e6-f438d4c4edf1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.352Z", "modified": "2020-06-19T19:13:16.352Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51874, "protocols": [ "tcp" ], "start": "2019-10-20T06:51:06.000Z", "end": "2019-10-20T06:53:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:51:06.000Z", "last_observed": "2019-10-20T06:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--86753522-284c-4aa8-b564-607e6a42bb7c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.352Z", "modified": "2020-06-19T19:13:16.352Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51874, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:51:06.000Z", "end": "2019-10-20T06:53:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T06:51:06.000Z", "last_observed": "2019-10-20T06:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--922253a3-52e2-4c26-aa4d-da7a2dd0ea20", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.353Z", "modified": "2020-06-19T19:13:16.353Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47484, "protocols": [ "tcp" ], "start": "2019-10-20T06:51:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:51:06.000Z", "last_observed": "2019-10-20T06:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8d490999-7306-432b-86f6-2e331ce2c730", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.353Z", "modified": "2020-06-19T19:13:16.353Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58686, "protocols": [ "tcp" ], "start": "2019-10-20T06:51:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:51:06.000Z", "last_observed": "2019-10-20T06:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e16f0b06-6f7d-4032-b7f2-4e48877fe714", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.353Z", "modified": "2020-06-19T19:13:16.353Z", "objects": { "0": { "type": "ipv4-addr", "value": "167.71.184.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35903, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T06:51:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:51:06.000Z", "last_observed": "2019-10-20T06:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--36b68e91-1e7a-4592-9d43-cdd50f0fe1e0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.353Z", "modified": "2020-06-19T19:13:16.353Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58686, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:51:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T06:51:06.000Z", "last_observed": "2019-10-20T06:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9c09b2ea-f502-43ae-b961-cc4e1673d503", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.353Z", "modified": "2020-06-19T19:13:16.353Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47484, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:51:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-20T06:51:06.000Z", "last_observed": "2019-10-20T06:51:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6cadb07b-2cd4-4c8e-a688-568ed924486e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.354Z", "modified": "2020-06-19T19:13:16.354Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58682, "protocols": [ "tcp" ], "start": "2019-10-20T06:50:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:50:06.000Z", "last_observed": "2019-10-20T06:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--715d7db0-a026-4fb1-8125-57ec305a1585", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.354Z", "modified": "2020-06-19T19:13:16.354Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 37518, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:50:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-20T06:50:06.000Z", "last_observed": "2019-10-20T06:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--35a1801c-6cdf-4628-9893-843738b3264f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.354Z", "modified": "2020-06-19T19:13:16.354Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58682, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:50:06.000Z", "end": "2019-10-20T06:52:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T06:50:06.000Z", "last_observed": "2019-10-20T06:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--31c97863-bd54-4956-bdf4-61e20bb4ba9d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.354Z", "modified": "2020-06-19T19:13:16.354Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 37518, "protocols": [ "tcp" ], "start": "2019-10-20T06:50:06.000Z", "end": "2019-10-20T06:51:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:50:06.000Z", "last_observed": "2019-10-20T06:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0ec760ce-9ab7-45ff-b154-dd0f74fc6dad", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.354Z", "modified": "2020-06-19T19:13:16.354Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58680, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:50:06.000Z", "end": "2019-10-20T06:51:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T06:50:06.000Z", "last_observed": "2019-10-20T06:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2857e1bc-2902-40cd-831d-377d173f8237", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.354Z", "modified": "2020-06-19T19:13:16.354Z", "objects": { "0": { "type": "ipv4-addr", "value": "45.136.109.95", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47163, "dst_port": 3360, "protocols": [ "tcp" ], "start": "2019-10-20T06:50:06.000Z", "end": "2019-10-20T06:51:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:50:06.000Z", "last_observed": "2019-10-20T06:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1416c7e1-e6e5-4217-82f0-68ec61713678", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.355Z", "modified": "2020-06-19T19:13:16.355Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58680, "protocols": [ "tcp" ], "start": "2019-10-20T06:50:06.000Z", "end": "2019-10-20T06:51:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:50:06.000Z", "last_observed": "2019-10-20T06:50:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d264c74f-8118-4d4e-91b0-700f7b4b40f0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.355Z", "modified": "2020-06-19T19:13:16.355Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58676, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:51:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7da69998-8e95-4a21-9146-bb826590720d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.355Z", "modified": "2020-06-19T19:13:16.355Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58676, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:51:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--84d6ac3e-b5fa-40e6-a361-0f06188999c8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.355Z", "modified": "2020-06-19T19:13:16.355Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51860, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1c1c3579-3513-46d7-badb-f9356086d294", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.355Z", "modified": "2020-06-19T19:13:16.355Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51848, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c339801e-2c0e-45ff-84b7-1c804d1c44ea", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.356Z", "modified": "2020-06-19T19:13:16.356Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47464, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e721f566-050c-4131-b701-97e7d7a28a3a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.356Z", "modified": "2020-06-19T19:13:16.356Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55344, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "52.94.229.96" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5f16e943-95c1-487d-8813-f34978a6a4f3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.356Z", "modified": "2020-06-19T19:13:16.356Z", "objects": { "0": { "type": "ipv4-addr", "value": "45.136.109.82", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52217, "dst_port": 9105, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--77ca40d7-ace7-4a2b-8aff-b3f87577ff61", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.356Z", "modified": "2020-06-19T19:13:16.356Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.230.128.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51591, "dst_port": 996, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--94d137e6-479f-46a8-8efb-897ffbb16b21", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.356Z", "modified": "2020-06-19T19:13:16.356Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47464, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--49084fd7-df73-449b-847b-20ffcb6c88a2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.356Z", "modified": "2020-06-19T19:13:16.356Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51860, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3a54fa9b-ccb9-43fb-ac59-b0e5f5960a32", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.357Z", "modified": "2020-06-19T19:13:16.357Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51848, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T06:49:06.000Z", "end": "2019-10-20T06:50:04.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T06:49:06.000Z", "last_observed": "2019-10-20T06:49:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--15fc15c7-e68c-48c7-90d2-a3b181a38eee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.357Z", "modified": "2020-06-19T19:13:16.357Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51266, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f64f5d13-5cb2-4d9d-a648-7dcfa65367e0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.357Z", "modified": "2020-06-19T19:13:16.357Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51264, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8e46a9ca-2a50-40bf-acc7-de268e0f27b2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.357Z", "modified": "2020-06-19T19:13:16.357Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51266, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c9c05dff-f8d0-40a4-adc3-8f7cd411f9b7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.357Z", "modified": "2020-06-19T19:13:16.357Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.89.120.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49693, "dst_port": 8050, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--62498028-022b-4214-b731-ab9871b866b0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.357Z", "modified": "2020-06-19T19:13:16.357Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33068, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d5102316-62b1-4763-8d9a-c8f1c733e83b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.358Z", "modified": "2020-06-19T19:13:16.358Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51264, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--81e2c820-b377-49fa-bb4e-2643a5968d91", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.358Z", "modified": "2020-06-19T19:13:16.358Z", "objects": { "0": { "type": "ipv4-addr", "value": "221.237.136.8", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48752, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e99d4220-2c57-45b0-b548-a1f839283dfc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.358Z", "modified": "2020-06-19T19:13:16.358Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.96.170", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 63226, "dst_port": 8888, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8a8d88c4-b3e9-4b32-8940-71e6a42788e9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.358Z", "modified": "2020-06-19T19:13:16.358Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.96.18", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 61796, "dst_port": 389, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--07f74702-638c-4916-b834-cd65503089ba", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.358Z", "modified": "2020-06-19T19:13:16.358Z", "objects": { "0": { "type": "ipv4-addr", "value": "221.237.136.8", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48752, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--60f75bc8-360e-4606-80a4-f1e136014ec0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.358Z", "modified": "2020-06-19T19:13:16.358Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48090, "dst_port": 10550, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d4c28f44-8fe8-4d1d-806e-a361d0d5c7c3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.359Z", "modified": "2020-06-19T19:13:16.359Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.65.40", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48031, "dst_port": 10525, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--02c583cf-bd99-40fa-96e2-f583fa6afbf1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.359Z", "modified": "2020-06-19T19:13:16.359Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33068, "protocols": [ "tcp" ], "start": "2019-10-20T05:39:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:39:06.000Z", "last_observed": "2019-10-20T05:39:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f4d12b23-6fa3-47cf-8097-1c7a5272aec1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.359Z", "modified": "2020-06-19T19:13:16.359Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58074, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bad480b1-e49d-41fe-bd3d-09c8d251ada0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.359Z", "modified": "2020-06-19T19:13:16.359Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58074, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:40:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--925c53e1-aab0-492c-9069-03ebd9fa2752", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.359Z", "modified": "2020-06-19T19:13:16.359Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33054, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b6285b03-661d-485d-b520-e4be413cc47c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.360Z", "modified": "2020-06-19T19:13:16.360Z", "objects": { "0": { "type": "ipv4-addr", "value": "139.162.99.58", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34562, "dst_port": 808, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e5131e30-2d09-4e75-a270-27fc8c2c7da4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.360Z", "modified": "2020-06-19T19:13:16.360Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.230.27.9", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42758, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a82ec5ef-0c48-4511-9ecf-c27b3fd50fab", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.360Z", "modified": "2020-06-19T19:13:16.360Z", "objects": { "0": { "type": "ipv4-addr", "value": "220.133.162.156", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51693, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--04128439-c63a-4406-b514-3c7bd424fb62", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.360Z", "modified": "2020-06-19T19:13:16.360Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58064, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ab70e60e-4ad2-47ae-837c-45471646c880", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.360Z", "modified": "2020-06-19T19:13:16.360Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33054, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2df8e9bc-a21b-4742-840a-49c0e7e713a7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.360Z", "modified": "2020-06-19T19:13:16.360Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58064, "protocols": [ "tcp" ], "start": "2019-10-20T05:38:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:38:06.000Z", "last_observed": "2019-10-20T05:38:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--df63eed6-3af7-4d99-9220-96302b22226e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.361Z", "modified": "2020-06-19T19:13:16.361Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58060, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:37:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T05:37:06.000Z", "last_observed": "2019-10-20T05:37:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4e2507c4-d90d-408d-b052-7166e6df5e22", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.361Z", "modified": "2020-06-19T19:13:16.361Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58058, "protocols": [ "tcp" ], "start": "2019-10-20T05:37:06.000Z", "end": "2019-10-20T05:38:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:37:06.000Z", "last_observed": "2019-10-20T05:37:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--84c04fc5-121e-4ed9-9464-472cf565426b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.361Z", "modified": "2020-06-19T19:13:16.361Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58058, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:37:06.000Z", "end": "2019-10-20T05:38:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T05:37:06.000Z", "last_observed": "2019-10-20T05:37:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ab5ffb81-e7c5-4c6b-bed8-907e39c7d525", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.361Z", "modified": "2020-06-19T19:13:16.361Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.115", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57770, "dst_port": 5324, "protocols": [ "tcp" ], "start": "2019-10-20T05:37:06.000Z", "end": "2019-10-20T05:38:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:37:06.000Z", "last_observed": "2019-10-20T05:37:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6a629899-88d6-42e9-aa07-cb5577099842", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.361Z", "modified": "2020-06-19T19:13:16.361Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60294, "protocols": [ "tcp" ], "start": "2019-10-20T05:37:06.000Z", "end": "2019-10-20T05:38:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:37:06.000Z", "last_observed": "2019-10-20T05:37:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--017023cf-79d7-4146-8f52-b47583d403b5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.361Z", "modified": "2020-06-19T19:13:16.361Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58060, "protocols": [ "tcp" ], "start": "2019-10-20T05:37:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:37:06.000Z", "last_observed": "2019-10-20T05:37:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1765186d-b693-4dc7-a02b-cac77577eaa8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.362Z", "modified": "2020-06-19T19:13:16.362Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60294, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:37:06.000Z", "end": "2019-10-20T05:39:02.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-20T05:37:06.000Z", "last_observed": "2019-10-20T05:37:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--42aaf4c2-b760-43a8-8e1c-50a5cc78d2c7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.362Z", "modified": "2020-06-19T19:13:16.362Z", "objects": { "0": { "type": "ipv4-addr", "value": "216.218.206.117", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39933, "dst_port": 389, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9b6f8187-08e2-43fa-af95-2b82080b77c9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.362Z", "modified": "2020-06-19T19:13:16.362Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58054, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:38:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4562c485-fc12-4ff7-8dee-9104233df795", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.362Z", "modified": "2020-06-19T19:13:16.362Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58054, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:38:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7cf7c8a0-3dfb-48ec-ad39-7db1bcee41b9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.362Z", "modified": "2020-06-19T19:13:16.362Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58052, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fc47f2b5-40db-401d-b8bb-dcb3770e0aa4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.362Z", "modified": "2020-06-19T19:13:16.362Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59780, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d9618dc8-b7b2-4572-a8e9-639fdb2326c4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.363Z", "modified": "2020-06-19T19:13:16.363Z", "objects": { "0": { "type": "ipv4-addr", "value": "2.191.248.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39359, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--48ae4f63-f3f9-45f3-b1f3-a64799523f97", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.363Z", "modified": "2020-06-19T19:13:16.363Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33042, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d50a03d9-1d9e-4fe1-9e64-cde12700fc16", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.363Z", "modified": "2020-06-19T19:13:16.363Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51234, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4758fd3c-7508-4b7d-8da3-e0b9da2bfb80", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.363Z", "modified": "2020-06-19T19:13:16.363Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58052, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2d90c073-a04d-443d-9eae-16d4cb129504", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.363Z", "modified": "2020-06-19T19:13:16.363Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33042, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--decb9574-7381-4953-9fa2-dded91aa51cd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.363Z", "modified": "2020-06-19T19:13:16.363Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47795, "dst_port": 10501, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3755b3d4-a900-4cf6-8046-a94245e97bd1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.364Z", "modified": "2020-06-19T19:13:16.364Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47795, "dst_port": 10502, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7a4535c4-f127-40bb-aaf5-987e71dbc5e3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.364Z", "modified": "2020-06-19T19:13:16.364Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48090, "dst_port": 10547, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e638b185-0c6a-4a62-84b7-9aebc72e71eb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.364Z", "modified": "2020-06-19T19:13:16.364Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51234, "protocols": [ "tcp" ], "start": "2019-10-20T05:36:06.000Z", "end": "2019-10-20T05:37:02.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T05:36:06.000Z", "last_observed": "2019-10-20T05:36:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2769d26b-d010-458b-95bf-0a3b3be463cc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.364Z", "modified": "2020-06-19T19:13:16.364Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.230", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51868, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e8dfc0a7-00be-4d36-9943-51506b769023", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.364Z", "modified": "2020-06-19T19:13:16.364Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56382, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9f14ca83-f1b6-45c3-b4c7-f016f5011d60", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.365Z", "modified": "2020-06-19T19:13:16.365Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56384, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cc67be10-6998-4d9c-b1e8-5895eeb73683", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.365Z", "modified": "2020-06-19T19:13:16.365Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.38", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33762, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c78c1906-d929-4dfa-a7b6-d064d3afb736", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.365Z", "modified": "2020-06-19T19:13:16.365Z", "objects": { "0": { "type": "ipv4-addr", "value": "218.94.60.99", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58387, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3faf5ac5-b8b9-4157-a48d-f0fa16247310", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.365Z", "modified": "2020-06-19T19:13:16.365Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56382, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--55da6fb5-2be1-4424-b7ad-ffe8cc748d18", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.365Z", "modified": "2020-06-19T19:13:16.365Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44619, "dst_port": 10402, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--99fc9a4d-bf5f-4c61-8b52-7d3d24414ee1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.365Z", "modified": "2020-06-19T19:13:16.365Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33762, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.38" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7cd82e44-93e3-46b4-a65b-36cb963b10eb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.366Z", "modified": "2020-06-19T19:13:16.366Z", "objects": { "0": { "type": "ipv4-addr", "value": "107.151.222.194", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55964, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eefc9b79-f971-415e-84c7-05a63786d95f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.366Z", "modified": "2020-06-19T19:13:16.366Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56384, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:45:06.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:45:06.000Z", "last_observed": "2019-10-20T04:45:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2268412c-cf4d-45c8-8498-ec52ec72eed3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.366Z", "modified": "2020-06-19T19:13:16.366Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60252, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--568e0c02-5208-41a0-9505-60ae0b951da7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.366Z", "modified": "2020-06-19T19:13:16.366Z", "objects": { "0": { "type": "ipv4-addr", "value": "59.63.26.186", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46060, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--703d9c31-3293-40a8-9c80-6b8ad2ab2583", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.366Z", "modified": "2020-06-19T19:13:16.366Z", "objects": { "0": { "type": "ipv4-addr", "value": "171.67.70.95", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38553, "dst_port": 8080, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b7133d0c-4ce7-4cd7-bad3-d90f5de4d632", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.366Z", "modified": "2020-06-19T19:13:16.366Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57606, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ff0c312e-be13-4c21-b985-74a868cd52d1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.367Z", "modified": "2020-06-19T19:13:16.367Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10496, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--963cbe4a-c70d-49db-ba69-f38ab9aecd3a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.367Z", "modified": "2020-06-19T19:13:16.367Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57606, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bb7d83d2-c39d-491f-aa6a-89db6ee14f3c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.367Z", "modified": "2020-06-19T19:13:16.367Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57608, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cf5d1ee8-2dc8-4eef-ba33-dfcfd9913158", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.367Z", "modified": "2020-06-19T19:13:16.367Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60252, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0a0d9a6f-0569-4aae-8060-29512e3e98c0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.367Z", "modified": "2020-06-19T19:13:16.367Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57608, "protocols": [ "tcp" ], "start": "2019-10-20T04:44:07.000Z", "end": "2019-10-20T04:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:44:07.000Z", "last_observed": "2019-10-20T04:44:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5d294c3a-b614-4e3b-aed8-44419ad221a1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.367Z", "modified": "2020-06-19T19:13:16.367Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45091, "dst_port": 10479, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5b399fdc-4054-4835-9a45-125d6bef05e0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.368Z", "modified": "2020-06-19T19:13:16.368Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44916, "dst_port": 10442, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--17b82e83-c7ef-47fe-b974-85b9c9c9e9f5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.368Z", "modified": "2020-06-19T19:13:16.368Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36261, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--599cb4c5-dcd0-4b92-b17b-8b7a760ba5a6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.368Z", "modified": "2020-06-19T19:13:16.368Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60814, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a80bbb55-2453-4263-92cd-5ce821da4fb1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.368Z", "modified": "2020-06-19T19:13:16.368Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57592, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--44661eca-909d-4ee5-a015-b4204b13f1ed", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.368Z", "modified": "2020-06-19T19:13:16.368Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45091, "dst_port": 10474, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2961eb71-36c1-493a-840d-fb9a2abbc4d6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.368Z", "modified": "2020-06-19T19:13:16.368Z", "objects": { "0": { "type": "ipv4-addr", "value": "221.114.210.132", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50340, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1d3179a6-5b2b-4814-aa06-3ff35649c2f5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.369Z", "modified": "2020-06-19T19:13:16.369Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.88.240.4", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42261, "dst_port": 5683, "protocols": [ "udp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4aca994f-cf70-4f0b-83ba-5b0bd3e2217d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.369Z", "modified": "2020-06-19T19:13:16.369Z", "objects": { "0": { "type": "ipv4-addr", "value": "198.108.66.155", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40726, "dst_port": 502, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9eb06f62-ac1c-46ff-8854-70d72bdbee7b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.369Z", "modified": "2020-06-19T19:13:16.369Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57592, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--99e1f428-5ecd-4a05-963f-810fa6ae5dc4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.369Z", "modified": "2020-06-19T19:13:16.369Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45091, "dst_port": 10480, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--16400ab0-104e-4d16-9db6-ee9a53435f8f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.369Z", "modified": "2020-06-19T19:13:16.369Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60814, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--223acb7e-3189-43ed-85a5-1263fe0f9880", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.369Z", "modified": "2020-06-19T19:13:16.369Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57602, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--18a17f1a-dd03-4934-92ae-7941928210e3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.370Z", "modified": "2020-06-19T19:13:16.370Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57602, "protocols": [ "tcp" ], "start": "2019-10-20T04:43:07.000Z", "end": "2019-10-20T04:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:43:07.000Z", "last_observed": "2019-10-20T04:43:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--34baf974-26ad-4a50-b1d3-16f9cd9ca82a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.370Z", "modified": "2020-06-19T19:13:16.370Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.230.103.158", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50436, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b6f48b9a-b9f7-4224-8a16-86927ad93684", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.370Z", "modified": "2020-06-19T19:13:16.370Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46384, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c053bddc-bea2-488e-87ac-3950436ae909", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.370Z", "modified": "2020-06-19T19:13:16.370Z", "objects": { "0": { "type": "ipv4-addr", "value": "122.228.19.80", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 31431, "dst_port": 2480, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--818e9e99-4b55-4c47-b4ae-7aadb48d1d87", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.370Z", "modified": "2020-06-19T19:13:16.370Z", "objects": { "0": { "type": "ipv4-addr", "value": "123.135.127.85", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52036, "dst_port": 22333, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4b00333a-e0b5-4cde-9808-d9072763067e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.370Z", "modified": "2020-06-19T19:13:16.370Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57586, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c2060405-1578-4ce6-903a-0e0593b980f1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.371Z", "modified": "2020-06-19T19:13:16.371Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57586, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7d8264e7-cc31-4baf-99c3-5e80fab77bd3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.371Z", "modified": "2020-06-19T19:13:16.371Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46384, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--87a58eaa-0133-4ad0-8960-347ff2b69e12", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.371Z", "modified": "2020-06-19T19:13:16.371Z", "objects": { "0": { "type": "ipv4-addr", "value": "61.78.62.184", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48039, "dst_port": 10010, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3227b56e-f7f6-4803-860c-3ceace3bea9e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.371Z", "modified": "2020-06-19T19:13:16.371Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57588, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d41c977b-f1c2-41a1-80fa-b6487fbe5919", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.371Z", "modified": "2020-06-19T19:13:16.371Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57588, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:42:02.000Z", "end": "2019-10-20T04:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:42:02.000Z", "last_observed": "2019-10-20T04:42:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1e0bc57e-ba61-4752-99de-f1cfbec0fc06", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.371Z", "modified": "2020-06-19T19:13:16.371Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.38", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33730, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1fb633a0-f159-425a-88ac-76e61f224a28", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.372Z", "modified": "2020-06-19T19:13:16.372Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10485, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7bd35a3e-b53a-4b05-ba9c-8f29a9e88270", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.372Z", "modified": "2020-06-19T19:13:16.372Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.91.212.79", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44923, "dst_port": 4643, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--24a6c3d7-30dd-451a-8970-613c24f6fa64", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.372Z", "modified": "2020-06-19T19:13:16.372Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57580, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9652ae08-6986-4104-a182-ac0e1b01b88c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.372Z", "modified": "2020-06-19T19:13:16.372Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.89.120.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36508, "dst_port": 8050, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--68fcfd5e-0067-4bab-a5c4-bcf43d5999fa", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.372Z", "modified": "2020-06-19T19:13:16.372Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51561, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--859e34ea-1dd7-484c-9b10-4d370b1c70c1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.372Z", "modified": "2020-06-19T19:13:16.372Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57580, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--73966fad-8474-4724-8ff5-2201a397caf1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.373Z", "modified": "2020-06-19T19:13:16.373Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57582, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--82c3d3aa-4230-4c7b-9c98-1f4077497eff", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.373Z", "modified": "2020-06-19T19:13:16.373Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57582, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f26f1a9b-1582-44a0-aa88-2f2e8cf472f3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.373Z", "modified": "2020-06-19T19:13:16.373Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33730, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:41:03.000Z", "end": "2019-10-20T04:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.38" } }, "first_observed": "2019-10-20T04:41:03.000Z", "last_observed": "2019-10-20T04:41:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3cbfe0a9-1f1b-42ea-91c1-440a8d262b3f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.373Z", "modified": "2020-06-19T19:13:16.373Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44916, "dst_port": 10448, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ae8f8a7e-3e0d-46d7-91c9-eab6287603db", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.373Z", "modified": "2020-06-19T19:13:16.373Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10486, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7533006f-1b5a-402f-a29d-d8a8ff1b5564", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.373Z", "modified": "2020-06-19T19:13:16.373Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50756, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ccb2d09e-94fd-44b4-b2fd-f2b3c4aeb8bb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.374Z", "modified": "2020-06-19T19:13:16.374Z", "objects": { "0": { "type": "ipv4-addr", "value": "198.108.67.92", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60004, "dst_port": 8838, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--732c81ef-ed5b-4d3d-917b-07a5df6797c1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.374Z", "modified": "2020-06-19T19:13:16.374Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50756, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--169f6322-c8b0-4017-a027-c7a8a7ee215d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.374Z", "modified": "2020-06-19T19:13:16.374Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.60", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59308, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--42d5cd15-4daf-471d-88e2-de7456c9922f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.374Z", "modified": "2020-06-19T19:13:16.374Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56344, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7ccef046-fc9e-43fe-a2ee-e4807ab68015", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.374Z", "modified": "2020-06-19T19:13:16.374Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10494, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7a063a67-c79c-4be5-a792-d9f4ced1abe5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.374Z", "modified": "2020-06-19T19:13:16.374Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56344, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--25c8dca2-39dd-48db-9c83-8e06458aea52", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.375Z", "modified": "2020-06-19T19:13:16.375Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45091, "dst_port": 10466, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--99f3a493-fb29-4b85-a2e5-b2271b872f1e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.375Z", "modified": "2020-06-19T19:13:16.375Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59804, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b9dd2a61-9c5a-47bc-948c-d718ada54cf4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.375Z", "modified": "2020-06-19T19:13:16.375Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56346, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--90ee250c-31a7-43e3-83b3-056942676318", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.375Z", "modified": "2020-06-19T19:13:16.375Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56346, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2b7a5d75-1eaf-429b-a18c-e14f4e1a172d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.375Z", "modified": "2020-06-19T19:13:16.375Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59308, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:40:01.000Z", "end": "2019-10-20T04:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-20T04:40:01.000Z", "last_observed": "2019-10-20T04:40:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9e12c70d-53d8-4c54-b484-7bcfeb05599a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.375Z", "modified": "2020-06-19T19:13:16.375Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50718, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6159e213-645e-46c3-9f74-148972044da3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.376Z", "modified": "2020-06-19T19:13:16.376Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10498, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--66e439d4-bb77-49b0-97b4-d3cadaa2c36e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.376Z", "modified": "2020-06-19T19:13:16.376Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44916, "dst_port": 10452, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2d6d4335-6ff6-4a9f-8977-4224a27d872d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.376Z", "modified": "2020-06-19T19:13:16.376Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40750, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.144.93" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--36f8782e-0b60-41e0-b2b5-aefc5f313c17", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.376Z", "modified": "2020-06-19T19:13:16.376Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50716, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bff0a37a-1421-4271-a762-36722362c665", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.376Z", "modified": "2020-06-19T19:13:16.376Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.144.93", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 40750, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--60649c6e-6c09-4097-8a3f-078a6fa2b7d8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.376Z", "modified": "2020-06-19T19:13:16.376Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50716, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--264c8cb9-e887-43a1-8f2a-2a44686e585c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.377Z", "modified": "2020-06-19T19:13:16.377Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50718, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b9ffe41a-52e4-4dd5-9126-8e7e1f226510", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.377Z", "modified": "2020-06-19T19:13:16.377Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.202", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42456, "dst_port": 8908, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b193b1a1-d34a-4978-b1a6-324adcccc8be", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.377Z", "modified": "2020-06-19T19:13:16.377Z", "objects": { "0": { "type": "ipv4-addr", "value": "122.228.19.80", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 5380, "dst_port": 79, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a255ab2f-d4c8-489b-aba1-a9523b4e349e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.377Z", "modified": "2020-06-19T19:13:16.377Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44619, "dst_port": 10414, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--90c33604-fb82-4cac-b843-ce778194c643", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.377Z", "modified": "2020-06-19T19:13:16.377Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44619, "dst_port": 10403, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d7784948-6f62-4786-ab8f-b5a50ce6c85d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.377Z", "modified": "2020-06-19T19:13:16.377Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44916, "dst_port": 10446, "protocols": [ "tcp" ], "start": "2019-10-20T04:34:04.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:34:04.000Z", "last_observed": "2019-10-20T04:34:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b1098de3-aef5-417d-a193-5eace8f146d7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.378Z", "modified": "2020-06-19T19:13:16.378Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 35174, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "51.83.73.48" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0f57e632-cfcd-4e09-9491-1c61d5e2c2bf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.378Z", "modified": "2020-06-19T19:13:16.378Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50442, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.140.105" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--53d3045e-789f-48c3-8732-5f8580b882ae", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.378Z", "modified": "2020-06-19T19:13:16.378Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.88.240.4", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46863, "dst_port": 520, "protocols": [ "udp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ad55dd99-0c7f-4a67-aa1f-7006c9c24138", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.378Z", "modified": "2020-06-19T19:13:16.378Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.89.120.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33282, "dst_port": 8050, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--42010cc6-3f35-4354-a0d8-0f6837ba5788", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.378Z", "modified": "2020-06-19T19:13:16.378Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.83.73.48", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35174, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--922aa995-128e-4308-82b2-325d576e1414", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.378Z", "modified": "2020-06-19T19:13:16.378Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.140.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50442, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cb9198a9-49ae-47a9-afc0-b12c3927a213", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.379Z", "modified": "2020-06-19T19:13:16.379Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50702, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ca7e872a-515d-4955-97c4-05f9f0ce8e30", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.379Z", "modified": "2020-06-19T19:13:16.379Z", "objects": { "0": { "type": "ipv4-addr", "value": "167.71.184.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48663, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a059689e-a31d-48f5-9105-32f3ec3f652a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.379Z", "modified": "2020-06-19T19:13:16.379Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10499, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8677a5b3-e555-4b63-a099-1c573093f89e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.379Z", "modified": "2020-06-19T19:13:16.379Z", "objects": { "0": { "type": "ipv4-addr", "value": "66.240.219.146", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 26200, "dst_port": 1990, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c35fc541-455c-4a47-a65e-ca980b625e9b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.379Z", "modified": "2020-06-19T19:13:16.379Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50702, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c6046940-0ab7-4523-8394-b0f234cd5c2b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.379Z", "modified": "2020-06-19T19:13:16.379Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50712, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--40988f7b-683c-4f35-8857-7f40d6063f6f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.380Z", "modified": "2020-06-19T19:13:16.380Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50712, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:33:03.000Z", "end": "2019-10-20T04:35:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:33:03.000Z", "last_observed": "2019-10-20T04:33:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2448d9e0-ad33-434c-a8cc-7ef117071a8c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.380Z", "modified": "2020-06-19T19:13:16.380Z", "objects": { "0": { "type": "ipv4-addr", "value": "37.49.231.121", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45782, "dst_port": 10001, "protocols": [ "udp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--528859b0-b7e0-4eb5-8fd7-62be1679e7ee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.380Z", "modified": "2020-06-19T19:13:16.380Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10489, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ba962636-0035-4115-a7cb-4a5eaa27050b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.380Z", "modified": "2020-06-19T19:13:16.380Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50696, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6f0aac17-8a78-458f-9d7d-8546b2db36c0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.380Z", "modified": "2020-06-19T19:13:16.380Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44619, "dst_port": 10418, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--434a9fcc-e9db-46bb-8cf1-f856094719be", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.380Z", "modified": "2020-06-19T19:13:16.380Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.38", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33660, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1b643024-8318-4ef9-9938-47e31148c6a0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.381Z", "modified": "2020-06-19T19:13:16.381Z", "objects": { "0": { "type": "ipv4-addr", "value": "154.221.19.154", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44232, "dst_port": 3389, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b269791d-3be9-4fb2-b47b-f579cf3ab99c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.381Z", "modified": "2020-06-19T19:13:16.381Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50696, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ce05db23-c76f-45a6-b525-71324e0b9482", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.381Z", "modified": "2020-06-19T19:13:16.381Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33660, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.38" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e3f863f2-482e-4b37-826c-e257ac67f7a0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.381Z", "modified": "2020-06-19T19:13:16.381Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50698, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9e6fc8ea-337a-4048-9e19-dbd30f7c6486", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.381Z", "modified": "2020-06-19T19:13:16.381Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50698, "protocols": [ "tcp" ], "start": "2019-10-20T04:32:04.000Z", "end": "2019-10-20T04:34:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:32:04.000Z", "last_observed": "2019-10-20T04:32:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6a06f61b-012a-4aea-872d-c0252abe46b6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.381Z", "modified": "2020-06-19T19:13:16.381Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.72.250", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36047, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--42c11465-6810-4a25-91dc-f395b24c0c54", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.381Z", "modified": "2020-06-19T19:13:16.382Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57504, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d30a1d93-7fcb-4136-9554-20a8b4a44914", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.382Z", "modified": "2020-06-19T19:13:16.382Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.118.37.70", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44738, "dst_port": 3389, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--080dee05-f4e5-496b-9063-32d427f522e7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.382Z", "modified": "2020-06-19T19:13:16.382Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.144.93", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 40724, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--efb31390-b845-4aa4-90d9-c6f8a1cc4cf0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.382Z", "modified": "2020-06-19T19:13:16.382Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.216.140.252", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41603, "dst_port": 7619, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--742367d4-9d98-4aba-92f0-0513e5524078", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.382Z", "modified": "2020-06-19T19:13:16.382Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45091, "dst_port": 10469, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bd40e416-29a9-4b7d-842c-7004b1c79061", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.382Z", "modified": "2020-06-19T19:13:16.382Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57504, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a2d2a2fb-1259-4b03-b535-7a483cfc5535", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.382Z", "modified": "2020-06-19T19:13:16.382Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57506, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8e1678df-edbc-45d4-a326-8186b76ba3e4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.383Z", "modified": "2020-06-19T19:13:16.383Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57506, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9b5b5a63-4a27-44a1-8775-29fb4f347cad", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.383Z", "modified": "2020-06-19T19:13:16.383Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40724, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:31:07.000Z", "end": "2019-10-20T04:33:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.144.93" } }, "first_observed": "2019-10-20T04:31:07.000Z", "last_observed": "2019-10-20T04:31:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--aaee09f1-5046-4019-a1e0-c48d8451a702", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.383Z", "modified": "2020-06-19T19:13:16.383Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57494, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5a3c8f15-4934-4da2-b1c4-74ef9126d0db", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.383Z", "modified": "2020-06-19T19:13:16.383Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50682, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--953abeb8-e1a0-41ef-bf10-20a59f248a71", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.383Z", "modified": "2020-06-19T19:13:16.383Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57494, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3579e97d-f063-4f26-9924-88f9a832547a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.384Z", "modified": "2020-06-19T19:13:16.384Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50682, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7050ded3-4468-49af-a924-0c1c8b36981d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.384Z", "modified": "2020-06-19T19:13:16.384Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46298, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1ce04643-dd71-485f-8fd2-43a8682b453e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.384Z", "modified": "2020-06-19T19:13:16.384Z", "objects": { "0": { "type": "ipv4-addr", "value": "61.181.83.150", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42644, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--afb8ee84-2e14-4fff-a577-107ff214b8dc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.384Z", "modified": "2020-06-19T19:13:16.384Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.174.206", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32928, "dst_port": 9527, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--833bc76d-b867-437a-9820-b6dc44b69f5d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.384Z", "modified": "2020-06-19T19:13:16.384Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46298, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:31:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f5ac1b3f-a406-4d85-8625-fa71253641ae", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.384Z", "modified": "2020-06-19T19:13:16.384Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50686, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bb8d2eaf-bdd5-4cb8-ad78-5c7cff6fedc8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.385Z", "modified": "2020-06-19T19:13:16.385Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50686, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:30:08.000Z", "end": "2019-10-20T04:32:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T04:30:08.000Z", "last_observed": "2019-10-20T04:30:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b6b8b3cf-b0dd-4f3c-8547-b7deea6fa6d9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.385Z", "modified": "2020-06-19T19:13:16.385Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57490, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1b3d39bd-2a81-4419-a249-08b71aaa4fb9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.385Z", "modified": "2020-06-19T19:13:16.385Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60262, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c4701ca7-73e5-4c47-8f30-d7a7ab58c65a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.385Z", "modified": "2020-06-19T19:13:16.385Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57494, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9f36fe48-8386-48f1-9784-0aeaf07b5039", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.385Z", "modified": "2020-06-19T19:13:16.385Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60262, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eb6a5505-c784-4aca-93ca-8c02a2b2b4fc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.386Z", "modified": "2020-06-19T19:13:16.386Z", "objects": { "0": { "type": "ipv4-addr", "value": "115.79.105.235", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42112, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b1cbb817-3872-417d-b54f-b82b4be57d17", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.386Z", "modified": "2020-06-19T19:13:16.386Z", "objects": { "0": { "type": "ipv4-addr", "value": "78.128.112.114", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47314, "dst_port": 3357, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--250b8382-17ee-4874-a553-a8e55122066c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.386Z", "modified": "2020-06-19T19:13:16.386Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57494, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--df4a4eee-6cc1-439a-ac93-7f2a3a85ca6e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.386Z", "modified": "2020-06-19T19:13:16.386Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57490, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5791be4c-8a62-4bda-981a-9ff4c5d1017d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.386Z", "modified": "2020-06-19T19:13:16.386Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44619, "dst_port": 10413, "protocols": [ "tcp" ], "start": "2019-10-20T04:29:07.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:29:07.000Z", "last_observed": "2019-10-20T04:29:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c0d58374-9916-431a-b2f4-0544bcc02480", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.386Z", "modified": "2020-06-19T19:13:16.386Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56246, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--28730977-d972-4615-a1f1-6cc8dbf0d71d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.387Z", "modified": "2020-06-19T19:13:16.387Z", "objects": { "0": { "type": "ipv4-addr", "value": "159.203.201.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 37835, "dst_port": 81, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--39a87a23-7126-4bca-ae58-2d7cd20deeaf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.387Z", "modified": "2020-06-19T19:13:16.387Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44619, "dst_port": 10404, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--34b20115-1d8c-430e-81d1-23252c3eb5e4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.387Z", "modified": "2020-06-19T19:13:16.387Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45162, "dst_port": 10484, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b196ed0a-7afb-40a8-9a1e-5fd55ca14efd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.387Z", "modified": "2020-06-19T19:13:16.387Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60248, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a30c1a9c-bfcf-4e46-a223-93c4c300b22c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.387Z", "modified": "2020-06-19T19:13:16.387Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.89.120.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34093, "dst_port": 8050, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0c248d94-af13-4851-933c-6c9a81e23f81", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.387Z", "modified": "2020-06-19T19:13:16.387Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56246, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--19dcb612-acc0-4fd5-a6d8-ccc1611b1642", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.388Z", "modified": "2020-06-19T19:13:16.388Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45091, "dst_port": 10477, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--42f1eeac-f2e1-446e-b8a0-60db67106d63", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.388Z", "modified": "2020-06-19T19:13:16.388Z", "objects": { "0": { "type": "ipv4-addr", "value": "171.6.84.243", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35677, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1fc2d72b-830a-408e-98f3-9bce2f24e296", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.388Z", "modified": "2020-06-19T19:13:16.388Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60248, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1e51caf8-bf96-4851-a4ac-b78b63d7e1d1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.388Z", "modified": "2020-06-19T19:13:16.388Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56258, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fd799214-f010-48fb-aa82-fff27d760613", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.388Z", "modified": "2020-06-19T19:13:16.388Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56258, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:28:06.000Z", "end": "2019-10-20T04:30:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:28:06.000Z", "last_observed": "2019-10-20T04:28:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e35013d4-94cf-4405-8d2e-eeccf3a1bfd9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.389Z", "modified": "2020-06-19T19:13:16.389Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60815, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9dabbad6-0fe2-46a2-9690-f74716c55c75", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.389Z", "modified": "2020-06-19T19:13:16.389Z", "objects": { "0": { "type": "ipv4-addr", "value": "125.64.94.221", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45833, "dst_port": 2376, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--12337127-b6f8-421e-bd56-8599d0fa8751", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.389Z", "modified": "2020-06-19T19:13:16.389Z", "objects": { "0": { "type": "ipv4-addr", "value": "180.176.148.98", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 18654, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f9d37d07-fa04-4f75-b7ed-f97ba6f9ae9a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.389Z", "modified": "2020-06-19T19:13:16.389Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60696, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--44a521b1-2d5f-4643-ab27-428da105a6f6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.389Z", "modified": "2020-06-19T19:13:16.389Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56240, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2bd39577-94e5-4d8f-a91b-884148acf66c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.389Z", "modified": "2020-06-19T19:13:16.389Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56240, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d6d20507-89ba-4006-881d-cdab2e4f5193", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.390Z", "modified": "2020-06-19T19:13:16.390Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.65.40", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44850, "dst_port": 10435, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--848922e8-edb4-4419-afff-77989bad140b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.390Z", "modified": "2020-06-19T19:13:16.390Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56244, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7e3f2270-e973-44b6-bf7d-7d884626f89d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.390Z", "modified": "2020-06-19T19:13:16.390Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60696, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eb8ecd43-4c28-4341-9a94-a0818b43f851", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.390Z", "modified": "2020-06-19T19:13:16.390Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56244, "protocols": [ "tcp" ], "start": "2019-10-20T04:27:03.000Z", "end": "2019-10-20T04:29:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:27:03.000Z", "last_observed": "2019-10-20T04:27:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--abd2dda5-d5f3-4bc9-ba4f-a88f777e2978", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.390Z", "modified": "2020-06-19T19:13:16.390Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.141.113", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 34026, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--827cf8a7-a04c-4046-90e5-b12434afe0c7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.390Z", "modified": "2020-06-19T19:13:16.390Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57456, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--69241d28-40ba-4759-81a0-6466667cae55", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.391Z", "modified": "2020-06-19T19:13:16.391Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57464, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5871368b-98ca-4bac-a49a-a747985422d2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.391Z", "modified": "2020-06-19T19:13:16.391Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.91.212.79", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54289, "dst_port": 4643, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ec61001b-da79-452a-a3b2-1770b95dd872", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.391Z", "modified": "2020-06-19T19:13:16.391Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.72.250", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46679, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b5ff5059-aae4-445c-9207-f2b3798ecc7e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.391Z", "modified": "2020-06-19T19:13:16.391Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57456, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--beacf86a-5468-4341-a0e2-dd741dafe53e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.391Z", "modified": "2020-06-19T19:13:16.391Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57464, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--321975bd-8f6c-4481-859a-462899291cf1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.391Z", "modified": "2020-06-19T19:13:16.391Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44916, "dst_port": 10458, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bc7c46c1-b837-4230-bcb5-a66c1729a5ad", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.392Z", "modified": "2020-06-19T19:13:16.392Z", "objects": { "0": { "type": "ipv4-addr", "value": "49.145.109.55", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 19833, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--958e2f53-621e-478c-92b9-796957e9bb2c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.392Z", "modified": "2020-06-19T19:13:16.392Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34026, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.141.113" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0fafd036-fa1c-4461-b014-2714d3b731e4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.392Z", "modified": "2020-06-19T19:13:16.392Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57468, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2635dd61-a89b-4e2b-ad97-d8739aaf2ace", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.392Z", "modified": "2020-06-19T19:13:16.392Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57468, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:26:07.000Z", "end": "2019-10-20T04:28:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:26:07.000Z", "last_observed": "2019-10-20T04:26:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4ca3e99d-ad50-4ed2-9105-02d670ae8f36", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.392Z", "modified": "2020-06-19T19:13:16.392Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57448, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c44d1aca-c095-4983-89c9-81705dedcd94", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.392Z", "modified": "2020-06-19T19:13:16.392Z", "objects": { "0": { "type": "ipv4-addr", "value": "76.26.156.108", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 6694, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e73f46c7-3bfe-4e4d-a4aa-f1269610adcc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.392Z", "modified": "2020-06-19T19:13:16.393Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57450, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--30d3104f-c3f0-4957-a8be-6b2eb458e49c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.393Z", "modified": "2020-06-19T19:13:16.393Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58466, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.146" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8752ecaa-7a90-4e19-a637-98c7facbd677", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.393Z", "modified": "2020-06-19T19:13:16.393Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.115", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57770, "dst_port": 5282, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--65a1d54d-cd2a-4d14-8a35-c356e82e9ce9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.393Z", "modified": "2020-06-19T19:13:16.393Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.60", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59188, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d32a5af8-13f0-4807-a7b6-7e1a6d52982c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.393Z", "modified": "2020-06-19T19:13:16.393Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57448, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4753f514-cbd5-4480-9835-6b2521a13547", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.393Z", "modified": "2020-06-19T19:13:16.393Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45091, "dst_port": 10473, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e164dce7-07cd-4a8d-97c0-ce025106af05", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.394Z", "modified": "2020-06-19T19:13:16.394Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59188, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2723445e-3943-408c-8bb3-f83323372068", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.394Z", "modified": "2020-06-19T19:13:16.394Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57450, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:26:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fadefdc3-e03e-4039-ba54-56b4620d3204", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.394Z", "modified": "2020-06-19T19:13:16.394Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57454, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--944d6604-177c-41a4-b6d1-827af4ddf8f4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.394Z", "modified": "2020-06-19T19:13:16.394Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57454, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T04:25:03.000Z", "end": "2019-10-20T04:27:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T04:25:03.000Z", "last_observed": "2019-10-20T04:25:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--47c82e67-7c3b-4ccd-a40c-e645982f5c1c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.394Z", "modified": "2020-06-19T19:13:16.394Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55862, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1af779c3-a082-48f0-848c-571281c23fb9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.394Z", "modified": "2020-06-19T19:13:16.394Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52984, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0e138877-237f-41e2-b5b7-ec01f17ddf83", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.395Z", "modified": "2020-06-19T19:13:16.395Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41851, "dst_port": 10365, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1975bac4-3ff5-4974-b803-6b713d6af826", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.395Z", "modified": "2020-06-19T19:13:16.395Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57094, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2b08a5f2-565e-4567-a932-e8d5ce7e9a6a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.395Z", "modified": "2020-06-19T19:13:16.395Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.89.120.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54770, "dst_port": 8050, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9bdf379d-4135-4ec8-9d77-7c42e3e79dd1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.395Z", "modified": "2020-06-19T19:13:16.395Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52984, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.66" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6de9d227-f29a-44df-ade7-f707c32a9b4b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.395Z", "modified": "2020-06-19T19:13:16.395Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.89.120.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41679, "dst_port": 8050, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--087fa621-6378-4fb5-9a3b-0e06f8234ee8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.395Z", "modified": "2020-06-19T19:13:16.395Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55862, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2b1e7bff-66d5-45f1-a611-60cefc4be6a9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.396Z", "modified": "2020-06-19T19:13:16.396Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57094, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bf470de8-4571-46f6-bc6d-0e3f4f9c0c33", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.396Z", "modified": "2020-06-19T19:13:16.396Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41920, "dst_port": 10395, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cfb1220a-6ca2-4e7c-8f78-92f94e4389f7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.396Z", "modified": "2020-06-19T19:13:16.396Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41851, "dst_port": 10368, "protocols": [ "tcp" ], "start": "2019-10-20T03:45:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:45:02.000Z", "last_observed": "2019-10-20T03:45:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bfad88b8-a635-490c-93a3-97f63a7c7593", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.396Z", "modified": "2020-06-19T19:13:16.396Z", "objects": { "0": { "type": "ipv4-addr", "value": "60.184.141.168", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47680, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f5c61853-3eba-4680-9fcc-90336c1477bf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.396Z", "modified": "2020-06-19T19:13:16.396Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59854, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--392266ef-7f3c-4e39-999e-8f2e099f7202", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.396Z", "modified": "2020-06-19T19:13:16.396Z", "objects": { "0": { "type": "ipv4-addr", "value": "163.172.204.151", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44865, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--64fa3e4d-9c27-41f2-ac78-3ee7c86649ab", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.397Z", "modified": "2020-06-19T19:13:16.397Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.39.143.5", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 5060, "dst_port": 13628, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--58d0344f-17c3-4c2a-a1f4-7a435a6f50ac", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.397Z", "modified": "2020-06-19T19:13:16.397Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.10", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54505, "dst_port": 33894, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0981f372-b9a1-44e1-90e4-c9db89ed27fc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.397Z", "modified": "2020-06-19T19:13:16.397Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55856, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f756fb41-ef67-4e9c-83f3-a39c27ed6233", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.397Z", "modified": "2020-06-19T19:13:16.397Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55856, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6f5c6b05-1f30-4cf6-9aef-e596c66ddebc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.397Z", "modified": "2020-06-19T19:13:16.397Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55858, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7dcd2495-528d-4340-a38e-6f1d5f4062d3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.397Z", "modified": "2020-06-19T19:13:16.397Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59854, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4ca20436-2f76-4bc2-b7ce-5b971358c76d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.398Z", "modified": "2020-06-19T19:13:16.398Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55858, "protocols": [ "tcp" ], "start": "2019-10-20T03:44:02.000Z", "end": "2019-10-20T03:46:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:44:02.000Z", "last_observed": "2019-10-20T03:44:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--44421212-a18a-4145-ae9a-fa5a4a6448ee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.398Z", "modified": "2020-06-19T19:13:16.398Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50266, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f14cec85-45e0-458c-9127-69f45289f1f7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.398Z", "modified": "2020-06-19T19:13:16.398Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.202", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42324, "dst_port": 33360, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--59ac5a47-c7d5-45ea-8a35-0049e4a929ee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.398Z", "modified": "2020-06-19T19:13:16.398Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41440, "dst_port": 10308, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2d0c5f7f-6027-4785-8dab-c2fa5c75a5c2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.398Z", "modified": "2020-06-19T19:13:16.398Z", "objects": { "0": { "type": "ipv4-addr", "value": "91.189.89.198", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 123, "dst_port": 40600, "protocols": [ "udp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a4986e39-bf05-455c-b4eb-5bb8c8ba6724", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.398Z", "modified": "2020-06-19T19:13:16.398Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.88.240.4", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33571, "dst_port": 5683, "protocols": [ "udp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--765c15fc-7152-48c6-9894-3460d933f40e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.399Z", "modified": "2020-06-19T19:13:16.399Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40600, "dst_port": 123, "protocols": [ "udp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "91.189.89.198" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--443aaf00-1ad9-4097-af37-fa62e9efa768", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.399Z", "modified": "2020-06-19T19:13:16.399Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.94.229.96", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53756, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--59dfe7a4-4a2c-4a56-9d40-b164ea74af2d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.399Z", "modified": "2020-06-19T19:13:16.399Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50266, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--342eb19e-f506-4298-803f-291312d9bd79", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.399Z", "modified": "2020-06-19T19:13:16.399Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53756, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.94.229.96" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f0553120-d7e8-4ea2-8aa9-218eb2a895f7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.399Z", "modified": "2020-06-19T19:13:16.399Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41679, "dst_port": 10322, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6ca93838-93db-456a-ac12-2d27893b7cc7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.399Z", "modified": "2020-06-19T19:13:16.399Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55852, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dbb605a5-a718-425d-a1ff-aed6d5e7915b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.400Z", "modified": "2020-06-19T19:13:16.400Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55852, "protocols": [ "tcp" ], "start": "2019-10-20T03:43:04.000Z", "end": "2019-10-20T03:45:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:43:04.000Z", "last_observed": "2019-10-20T03:43:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--60b7dea3-d511-4702-ba0e-179082e4ce2c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.400Z", "modified": "2020-06-19T19:13:16.400Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.97.114", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49176, "dst_port": 161, "protocols": [ "udp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5ab82534-3bec-4ba5-be79-f017d870f47c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.400Z", "modified": "2020-06-19T19:13:16.400Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.119.160.97", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52374, "dst_port": 15451, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3339f3e5-fde4-4a6b-86b3-2e0759451e1e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.400Z", "modified": "2020-06-19T19:13:16.400Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.51", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57847, "dst_port": 8126, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c979ea37-440e-47d0-bd2a-13f295484184", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.400Z", "modified": "2020-06-19T19:13:16.400Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41920, "dst_port": 10399, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d7ada3c5-6f33-4b15-b87f-525bf8e16da6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.401Z", "modified": "2020-06-19T19:13:16.401Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55836, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--972ac2d7-6bd2-47a8-9f7a-a805fba5ca0c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.401Z", "modified": "2020-06-19T19:13:16.401Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55836, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--496d2d6d-4a63-42f3-a124-c684bafd04cf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.401Z", "modified": "2020-06-19T19:13:16.401Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.156.200.237", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41331, "dst_port": 53413, "protocols": [ "udp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6663c78c-e559-4e1d-9397-ee151fc96574", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.401Z", "modified": "2020-06-19T19:13:16.401Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35904, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b09c9bda-0951-43dc-99c6-5ad5e4ce3c6f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.401Z", "modified": "2020-06-19T19:13:16.401Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.153.197.116", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56626, "dst_port": 9999, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2e3c4cc0-fd3e-47bf-9d81-27f5cce086db", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.401Z", "modified": "2020-06-19T19:13:16.401Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50254, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d2d0c1a3-3a5f-4873-9411-99da14bf2176", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.402Z", "modified": "2020-06-19T19:13:16.402Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50254, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a703e9c6-bf56-407a-8354-e6bc39c7a70a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.402Z", "modified": "2020-06-19T19:13:16.402Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35904, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:42:04.000Z", "end": "2019-10-20T03:44:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-20T03:42:04.000Z", "last_observed": "2019-10-20T03:42:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4a32bf60-aecb-4708-96d2-f96988747b26", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.402Z", "modified": "2020-06-19T19:13:16.402Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41440, "dst_port": 10320, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ebf08151-110e-46c5-a906-6bed760cd80a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.402Z", "modified": "2020-06-19T19:13:16.402Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.141.113", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33618, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eb10191e-0987-426d-9a64-22b9944093b3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.402Z", "modified": "2020-06-19T19:13:16.402Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41851, "dst_port": 10369, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--94103660-8c22-472b-ae14-84282f904c62", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.402Z", "modified": "2020-06-19T19:13:16.402Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.96.218", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58834, "dst_port": 16010, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5d4fc528-2279-4919-b2f7-aa24798bf20a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.403Z", "modified": "2020-06-19T19:13:16.403Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55830, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d2932303-c772-4e72-95ec-fa153625f8a5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.403Z", "modified": "2020-06-19T19:13:16.403Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41920, "dst_port": 10393, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eabce136-991f-4ce7-8393-f45aa716819e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.403Z", "modified": "2020-06-19T19:13:16.403Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.174.215", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58963, "dst_port": 8089, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6c61b788-c648-46ee-bf87-803970cf4d10", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.403Z", "modified": "2020-06-19T19:13:16.403Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55830, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0652c30f-c134-4fed-b1b9-feec812b4124", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.403Z", "modified": "2020-06-19T19:13:16.403Z", "objects": { "0": { "type": "ipv4-addr", "value": "94.190.78.46", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 1574, "dst_port": 5555, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ec933c95-c75d-4031-9ca9-789c5987f82c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.404Z", "modified": "2020-06-19T19:13:16.404Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55832, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b297255e-58dd-4385-8273-7ba85de17b0c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.404Z", "modified": "2020-06-19T19:13:16.404Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33618, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.141.113" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--32ad7f0f-719f-4108-acdb-640c237b5683", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.404Z", "modified": "2020-06-19T19:13:16.404Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55832, "protocols": [ "tcp" ], "start": "2019-10-20T03:41:02.000Z", "end": "2019-10-20T03:43:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:41:02.000Z", "last_observed": "2019-10-20T03:41:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1d34c880-b89a-48f0-8791-93c569e87802", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.404Z", "modified": "2020-06-19T19:13:16.404Z", "objects": { "0": { "type": "ipv4-addr", "value": "192.99.10.122", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32767, "dst_port": 8545, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8e5af4c0-c34d-45ce-be67-446662b0cce4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.404Z", "modified": "2020-06-19T19:13:16.404Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41920, "dst_port": 10385, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3a670b42-d060-4a04-a45b-2a8e1e4e3a03", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.405Z", "modified": "2020-06-19T19:13:16.405Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50236, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3cbf3d31-b764-4c03-9753-a577b999aa1b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.405Z", "modified": "2020-06-19T19:13:16.405Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60276, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--242e607f-a088-447f-bac9-b7f42c3c47bb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.405Z", "modified": "2020-06-19T19:13:16.405Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50236, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7936f675-d86e-4d75-9ff9-ec3ead4a55ea", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.405Z", "modified": "2020-06-19T19:13:16.405Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.89.120.185", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59874, "dst_port": 8050, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--56648818-fa56-4ede-b7af-818adf19b969", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.405Z", "modified": "2020-06-19T19:13:16.405Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39363, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bdacb9ba-bc63-4ebc-99e6-265f1d49e922", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.405Z", "modified": "2020-06-19T19:13:16.405Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 50240, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--875fdd2b-6cde-43b9-a737-60fad975d2c9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.406Z", "modified": "2020-06-19T19:13:16.406Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50240, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:41:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--15907a1f-302e-40f9-9248-66bc0909e3c4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.406Z", "modified": "2020-06-19T19:13:16.406Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60276, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a631d886-1e93-410f-b566-bb55cc767661", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.406Z", "modified": "2020-06-19T19:13:16.406Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55826, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8f071508-49e0-4dc9-b9ce-43ee11e498c6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.406Z", "modified": "2020-06-19T19:13:16.406Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55826, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:40:03.000Z", "end": "2019-10-20T03:42:01.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:40:03.000Z", "last_observed": "2019-10-20T03:40:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b1b2bf4d-0cd8-4069-9146-b07f88644f6f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.407Z", "modified": "2020-06-19T19:13:16.407Z", "objects": { "0": { "type": "ipv4-addr", "value": "91.189.89.198", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 123, "dst_port": 37739, "protocols": [ "udp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bc5fc211-7d51-4ebd-9947-b4aa33b4eef5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.407Z", "modified": "2020-06-19T19:13:16.407Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35612, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9a0b04a8-0dfa-493f-8e82-bb4d10b40c97", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.407Z", "modified": "2020-06-19T19:13:16.407Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 49960, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fd0bc7c4-cda7-42d3-b472-4cdf61c991e3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.407Z", "modified": "2020-06-19T19:13:16.407Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55546, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4f3cab8f-b349-4867-85e5-cc851282f741", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.407Z", "modified": "2020-06-19T19:13:16.407Z", "objects": { "0": { "type": "ipv4-addr", "value": "74.82.47.8", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40039, "dst_port": 523, "protocols": [ "udp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--836f2883-2c42-4ce8-aa58-1c5a457bab52", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.407Z", "modified": "2020-06-19T19:13:16.408Z", "objects": { "0": { "type": "ipv4-addr", "value": "203.201.62.36", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54381, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ce259074-dbde-4958-bf64-c54ae0fbb6db", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.408Z", "modified": "2020-06-19T19:13:16.408Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49960, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c764c4ce-e1eb-43b8-a5ab-b6ee3b582265", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.408Z", "modified": "2020-06-19T19:13:16.408Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55546, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--91057031-4abd-4e8b-b930-4b97457a3ff0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.408Z", "modified": "2020-06-19T19:13:16.408Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35612, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6c467a8e-45a6-4299-a726-f1fc3342fa25", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.408Z", "modified": "2020-06-19T19:13:16.408Z", "objects": { "0": { "type": "ipv4-addr", "value": "45.82.153.35", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41711, "dst_port": 7910, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--03801292-1172-4bd4-94c2-9c557744d65b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.408Z", "modified": "2020-06-19T19:13:16.408Z", "objects": { "0": { "type": "ipv4-addr", "value": "159.203.201.245", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52606, "dst_port": 8081, "protocols": [ "tcp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c4148c04-392e-497d-a81d-8679035673b0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.409Z", "modified": "2020-06-19T19:13:16.409Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 37739, "dst_port": 123, "protocols": [ "udp" ], "start": "2019-10-20T03:09:08.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "91.189.89.198" } }, "first_observed": "2019-10-20T03:09:08.000Z", "last_observed": "2019-10-20T03:09:08.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1007c2f7-2852-498a-82b0-9886585ee56b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.409Z", "modified": "2020-06-19T19:13:16.409Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55538, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b835e4ca-70e0-4777-a6fd-a613ea085370", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.409Z", "modified": "2020-06-19T19:13:16.409Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55538, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4d823190-632c-44a2-9729-0507ad04afeb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.409Z", "modified": "2020-06-19T19:13:16.409Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59528, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d41c8e94-e341-4104-886f-b2b108dd8a2d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.409Z", "modified": "2020-06-19T19:13:16.409Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.29", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43995, "dst_port": 5621, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9e7bc4b6-102c-4cee-a8ba-3bc63bb86785", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.409Z", "modified": "2020-06-19T19:13:16.409Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.137.233.123", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53694, "dst_port": 5188, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bab30c1a-6d09-42a1-9267-a744cd90e4c4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.410Z", "modified": "2020-06-19T19:13:16.410Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.65.40", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58492, "dst_port": 10230, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fdafbe96-c8f0-42da-bd6b-933731788aee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.410Z", "modified": "2020-06-19T19:13:16.410Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 49956, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0a521373-110a-4f50-b84f-7de4e04e28fd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.410Z", "modified": "2020-06-19T19:13:16.410Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49956, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--66cdb98d-5da6-4e08-8014-85f34ed63f6d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.410Z", "modified": "2020-06-19T19:13:16.410Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59528, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:08:07.000Z", "end": "2019-10-20T03:10:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-20T03:08:07.000Z", "last_observed": "2019-10-20T03:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--312c4fc7-5b05-4832-bb74-cbeade3e37bc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.410Z", "modified": "2020-06-19T19:13:16.410Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.230", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36926, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ea7e579b-b433-4074-8df3-c3216db621a8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.411Z", "modified": "2020-06-19T19:13:16.411Z", "objects": { "0": { "type": "ipv4-addr", "value": "124.156.55.36", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34302, "dst_port": 2480, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eeb88a97-a6d4-488b-8d65-05f16eab77f2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.411Z", "modified": "2020-06-19T19:13:16.411Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.39.10.54", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58682, "dst_port": 10288, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--81d2fed7-f12c-4661-aff7-61fa6621a5a9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.411Z", "modified": "2020-06-19T19:13:16.411Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58674, "dst_port": 10265, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5e6cc01f-a30f-49a6-ac0d-38c686b60412", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.411Z", "modified": "2020-06-19T19:13:16.411Z", "objects": { "0": { "type": "ipv4-addr", "value": "187.171.206.49", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 14051, "dst_port": 9527, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--76b5cb2d-9e1c-4aa8-990d-ca0d811a7ed2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.411Z", "modified": "2020-06-19T19:13:16.411Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57770, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.146" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4e1b3462-c018-49b6-91f8-566ff1fd7c80", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.411Z", "modified": "2020-06-19T19:13:16.411Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58493, "dst_port": 10250, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e6e65d96-2164-4b4d-aa5d-fee57ec089dd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.412Z", "modified": "2020-06-19T19:13:16.412Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 49938, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fe6c3890-855b-4cf1-a1c8-be803616fb38", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.412Z", "modified": "2020-06-19T19:13:16.412Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49938, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3588581a-96c3-4758-8deb-70afcdff7e04", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.412Z", "modified": "2020-06-19T19:13:16.412Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58674, "dst_port": 10276, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9d8aa569-89fb-49f5-ac71-96dfad229c03", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.412Z", "modified": "2020-06-19T19:13:16.412Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.146", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57770, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--24a515e3-5574-43db-b390-8f19be8d2619", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.412Z", "modified": "2020-06-19T19:13:16.412Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.141.113", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33314, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9276974b-9d5c-41fe-a323-4c99aa5ba52f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.412Z", "modified": "2020-06-19T19:13:16.412Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.96.194", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55503, "dst_port": 138, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5c98f743-1fa1-46e2-b4ea-23065b6a2809", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.413Z", "modified": "2020-06-19T19:13:16.413Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55526, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--304e6d87-74d7-4f4b-b382-44e5ec0f0c31", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.413Z", "modified": "2020-06-19T19:13:16.413Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55526, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bcae59df-077d-45c4-b90e-986de399a058", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.413Z", "modified": "2020-06-19T19:13:16.413Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33314, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:07:00.000Z", "end": "2019-10-20T03:09:00.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.141.113" } }, "first_observed": "2019-10-20T03:07:00.000Z", "last_observed": "2019-10-20T03:07:00.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--660d2286-d4a8-4a73-8673-bcdee30b9320", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.413Z", "modified": "2020-06-19T19:13:16.413Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.119.160.97", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52374, "dst_port": 2290, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--de924a5e-61a6-4f78-8cd1-b3bac48aae49", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.413Z", "modified": "2020-06-19T19:13:16.413Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56742, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bc13a13a-4543-4e2c-aef4-c32f035a5a2f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.414Z", "modified": "2020-06-19T19:13:16.414Z", "objects": { "0": { "type": "ipv4-addr", "value": "74.82.47.50", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 8698, "dst_port": 53, "protocols": [ "udp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a02b9cd9-90b8-4fb4-bece-5775e6708d4b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.414Z", "modified": "2020-06-19T19:13:16.414Z", "objects": { "0": { "type": "ipv4-addr", "value": "94.102.49.102", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34532, "dst_port": 5555, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a4026136-ebd6-4e3d-ac07-b3d81eeed792", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.414Z", "modified": "2020-06-19T19:13:16.414Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58474, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ced6c582-b818-45c9-b8b0-72a7fd53759e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.414Z", "modified": "2020-06-19T19:13:16.414Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56746, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2516a8b7-fc87-465d-a13d-cf7e756bbd24", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.414Z", "modified": "2020-06-19T19:13:16.414Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56742, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--25ffa372-edc8-4da2-b999-23ca078e6e14", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.414Z", "modified": "2020-06-19T19:13:16.414Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.65.40", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58492, "dst_port": 10234, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2c559daf-e82f-4a1a-8344-ef432eb3b7f8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.415Z", "modified": "2020-06-19T19:13:16.415Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56746, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--66f91aeb-4814-4e87-bfb5-0de47c764712", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.415Z", "modified": "2020-06-19T19:13:16.415Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35584, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:07:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a1b5cc8f-209d-4cf3-b97b-d81d266af806", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.415Z", "modified": "2020-06-19T19:13:16.415Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49934, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c3398c50-7971-41f6-a84c-f1d1ba9de5ca", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.415Z", "modified": "2020-06-19T19:13:16.415Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35584, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c50640a0-bba7-4a7c-8f0a-d2d3c78bfeeb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.415Z", "modified": "2020-06-19T19:13:16.415Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 49934, "protocols": [ "tcp" ], "start": "2019-10-20T03:06:03.000Z", "end": "2019-10-20T03:08:00.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T03:06:03.000Z", "last_observed": "2019-10-20T03:06:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--71b05789-1be3-412d-84f8-86808ecbb89e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.415Z", "modified": "2020-06-19T19:13:16.415Z", "objects": { "0": { "type": "ipv4-addr", "value": "5.8.10.202", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33244, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7826f951-5f38-41a4-b112-099a9c383677", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.416Z", "modified": "2020-06-19T19:13:16.416Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 32956, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "5.8.10.202" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ec5ee74e-3d16-4eda-9e70-f327e78ebdd8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.416Z", "modified": "2020-06-19T19:13:16.416Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 60000, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "80.82.70.118" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d2ecc982-3733-4830-aee5-663dfb9df828", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.416Z", "modified": "2020-06-19T19:13:16.416Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59560, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7be14f38-14ab-4b49-9773-d23f6b1890b4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.416Z", "modified": "2020-06-19T19:13:16.416Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55108, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--de77c523-866e-4993-a02f-6548b4306bce", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.416Z", "modified": "2020-06-19T19:13:16.417Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.70.118", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60000, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--53b01c46-2efc-4ee0-b0b6-ef7f6ce321a4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.417Z", "modified": "2020-06-19T19:13:16.417Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55108, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c5030ead-1777-40f3-ac24-5b97e3900f7f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.417Z", "modified": "2020-06-19T19:13:16.417Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59560, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--048071b2-197e-404c-b055-dc3df8dec878", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.417Z", "modified": "2020-06-19T19:13:16.417Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55104, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4879cab5-3f7e-4acd-af8b-ae4a2727cce5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.417Z", "modified": "2020-06-19T19:13:16.417Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 33244, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "5.8.10.202" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b34f7962-b214-4225-b39a-c58d28f11f55", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.418Z", "modified": "2020-06-19T19:13:16.418Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55489, "dst_port": 10187, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e0ebf970-f6b1-4aae-9850-e1fc31f12f15", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.418Z", "modified": "2020-06-19T19:13:16.418Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55104, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3dcebe7c-8eb3-4507-b7eb-e74bb46887aa", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.418Z", "modified": "2020-06-19T19:13:16.418Z", "objects": { "0": { "type": "ipv4-addr", "value": "5.8.10.202", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 32956, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-20T02:19:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:19:01.000Z", "last_observed": "2019-10-20T02:19:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e8463dd7-641d-4fa7-9a21-024408bd942c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.418Z", "modified": "2020-06-19T19:13:16.418Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55102, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fc4ec4fa-9394-4a92-bcc3-1ea0e8e9da9a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.418Z", "modified": "2020-06-19T19:13:16.418Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.119.160.97", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52374, "dst_port": 10740, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d950e17d-8de8-459e-87ac-8fbb757cea22", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.419Z", "modified": "2020-06-19T19:13:16.419Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56328, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--26bf2122-b6f6-458d-9c44-fcd4c0983adb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.419Z", "modified": "2020-06-19T19:13:16.419Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55489, "dst_port": 10182, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8e04c73a-bb9e-49cf-a9f8-b6be0b348d6c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.419Z", "modified": "2020-06-19T19:13:16.419Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56328, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a19b014f-04d8-4f0d-9be8-1b05b9e64df5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.419Z", "modified": "2020-06-19T19:13:16.419Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 45130, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--38237928-72ad-4651-96a6-2d0a07577fe0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.419Z", "modified": "2020-06-19T19:13:16.419Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55313, "dst_port": 10148, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7be9ac75-324f-40a0-8e09-99373057c54c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.419Z", "modified": "2020-06-19T19:13:16.420Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.65.40", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55312, "dst_port": 10123, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--660a7fb0-0664-4b8a-8d3b-52f9f0378839", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.420Z", "modified": "2020-06-19T19:13:16.420Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55102, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ff979a7a-545d-4653-94fb-a10826cffc24", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.420Z", "modified": "2020-06-19T19:13:16.420Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.171", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55313, "dst_port": 10142, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--62c7e754-ab79-45fa-9699-f772d2fc2b1f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.420Z", "modified": "2020-06-19T19:13:16.420Z", "objects": { "0": { "type": "ipv4-addr", "value": "2.85.53.237", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 19467, "dst_port": 9527, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b64c45c5-42c9-4192-9d57-9a63107b749b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.420Z", "modified": "2020-06-19T19:13:16.420Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45130, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:18:01.000Z", "end": "2019-10-20T02:19:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-20T02:18:01.000Z", "last_observed": "2019-10-20T02:18:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--292c56c2-9d39-4e98-a8a5-e8b8d326ee85", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.420Z", "modified": "2020-06-19T19:13:16.420Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.49", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57830, "dst_port": 7084, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7b3d1bae-fc52-404e-a47f-551fd5e7615a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.420Z", "modified": "2020-06-19T19:13:16.420Z", "objects": { "0": { "type": "ipv4-addr", "value": "93.174.93.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55489, "dst_port": 10198, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9def9613-3c51-4b7e-b942-53cd527fbcf3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.421Z", "modified": "2020-06-19T19:13:16.421Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 45116, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--55738dfb-a70a-4bae-a811-a8823d6ac0d3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.421Z", "modified": "2020-06-19T19:13:16.421Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45116, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4256a8fc-10f6-4edc-a7fb-f4e43895e1e3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.421Z", "modified": "2020-06-19T19:13:16.421Z", "objects": { "0": { "type": "ipv4-addr", "value": "159.203.201.176", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58477, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--04dd9b1f-cd9d-475c-904a-d16211e19981", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.421Z", "modified": "2020-06-19T19:13:16.421Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55084, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--77fd0ec3-fdd9-44fa-9a11-688777da3ca6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.421Z", "modified": "2020-06-19T19:13:16.421Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55084, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3d9a5b18-60d4-4f3e-a928-0d92b8ef34f2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.421Z", "modified": "2020-06-19T19:13:16.421Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56318, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9510939d-ad31-4a31-843a-831677ff9622", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.422Z", "modified": "2020-06-19T19:13:16.422Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56318, "protocols": [ "tcp" ], "start": "2019-10-20T02:17:05.000Z", "end": "2019-10-20T02:18:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:17:05.000Z", "last_observed": "2019-10-20T02:17:05.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--34ad91b4-4775-4e27-b187-b0c4a3fed530", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.422Z", "modified": "2020-06-19T19:13:16.422Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55076, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--65854337-3ddb-4a1a-87ca-f8c1e15e32f6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.422Z", "modified": "2020-06-19T19:13:16.422Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39466, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cb7c6b30-e0ce-44f4-9b72-17506a2fc68e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.422Z", "modified": "2020-06-19T19:13:16.422Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55074, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--64363957-e67a-4337-adeb-abfeea3f0497", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.422Z", "modified": "2020-06-19T19:13:16.422Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55076, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5fe99315-ea2a-4538-bdf4-c8d6e33635b8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.422Z", "modified": "2020-06-19T19:13:16.423Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.38", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60696, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2dd2407d-a319-45d9-8641-07c7f3577afb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.423Z", "modified": "2020-06-19T19:13:16.423Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.168.217", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53773, "dst_port": 1719, "protocols": [ "udp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--31e82c93-8205-4e6f-aaa0-6f9d3a5dab89", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.423Z", "modified": "2020-06-19T19:13:16.423Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55080, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7a2af2d3-1346-4800-94fe-8463a2ac1f96", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.423Z", "modified": "2020-06-19T19:13:16.423Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52988, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "52.94.229.96" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--79a4ee9e-96c1-4b4f-a8b0-20381c1f1c6d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.423Z", "modified": "2020-06-19T19:13:16.423Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59532, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7b78ca1e-d49f-4c56-b4c9-4a9f0e4ac849", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.423Z", "modified": "2020-06-19T19:13:16.423Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.137.233.120", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53791, "dst_port": 3395, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9003054f-b42a-434f-bfe1-79387a02e167", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.424Z", "modified": "2020-06-19T19:13:16.424Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55080, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--727c3b3e-a0ac-42f7-aaaa-d3f0e0664dab", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.424Z", "modified": "2020-06-19T19:13:16.424Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33846, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dd04158c-6c46-4216-8c59-f001fb3a2cf3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.424Z", "modified": "2020-06-19T19:13:16.424Z", "objects": { "0": { "type": "ipv4-addr", "value": "118.171.52.132", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 14603, "dst_port": 2323, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--38a85daf-29cc-4493-802a-90862ade4757", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.424Z", "modified": "2020-06-19T19:13:16.424Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55074, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--418485fa-d3c9-4173-898f-561a00e1baef", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.424Z", "modified": "2020-06-19T19:13:16.424Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 59532, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:16:59.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f9cfa581-0994-4368-b7b1-921a6687b32f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.424Z", "modified": "2020-06-19T19:13:16.424Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60696, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T02:16:04.000Z", "end": "2019-10-20T02:17:59.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.38" } }, "first_observed": "2019-10-20T02:16:04.000Z", "last_observed": "2019-10-20T02:16:04.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--969ecb78-5e25-404b-a2c9-091a30e6cf65", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.425Z", "modified": "2020-06-19T19:13:16.425Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55706, "protocols": [ "tcp" ], "start": "2019-10-20T01:05:03.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:05:03.000Z", "last_observed": "2019-10-20T01:05:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c69973ae-e5f4-47f2-aa99-2513d6c9b2b8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.425Z", "modified": "2020-06-19T19:13:16.425Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55708, "protocols": [ "tcp" ], "start": "2019-10-20T01:05:03.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:05:03.000Z", "last_observed": "2019-10-20T01:05:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c7aa62e6-7f10-48c2-9138-e9c785abe2c0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.425Z", "modified": "2020-06-19T19:13:16.425Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51598, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:05:03.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.66" } }, "first_observed": "2019-10-20T01:05:03.000Z", "last_observed": "2019-10-20T01:05:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4d499c2b-b0d9-48c8-a8ab-b2a5fefd4728", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.425Z", "modified": "2020-06-19T19:13:16.425Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55708, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:05:03.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T01:05:03.000Z", "last_observed": "2019-10-20T01:05:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3dbc15a4-0015-4f66-adc3-8da5dd3b6fb7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.425Z", "modified": "2020-06-19T19:13:16.425Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55706, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:05:03.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T01:05:03.000Z", "last_observed": "2019-10-20T01:05:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a3518aa6-9e1e-43da-a89f-de221d1fe871", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.425Z", "modified": "2020-06-19T19:13:16.425Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51598, "protocols": [ "tcp" ], "start": "2019-10-20T01:05:03.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:05:03.000Z", "last_observed": "2019-10-20T01:05:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ef1e9489-79f2-4ab3-a39d-573c9a36ca59", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.426Z", "modified": "2020-06-19T19:13:16.426Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58922, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a6e88ead-9692-4768-8849-c29e8ffbd46e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.426Z", "modified": "2020-06-19T19:13:16.426Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58922, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9f53d8fc-cfb9-44b3-8eb1-f12d449d29f5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.426Z", "modified": "2020-06-19T19:13:16.426Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54470, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--50e4dc81-9d3d-41fe-8e4a-e63353bd3a86", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.426Z", "modified": "2020-06-19T19:13:16.426Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54470, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--100c81be-5c4e-4ab3-a420-f9aedd9b618b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.426Z", "modified": "2020-06-19T19:13:16.426Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.97.10", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58181, "dst_port": 5985, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6f0e9ebc-d4ad-4048-b98f-a3ec12cdc520", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.427Z", "modified": "2020-06-19T19:13:16.427Z", "objects": { "0": { "type": "ipv4-addr", "value": "177.103.34.65", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 50754, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0631073d-c5ef-4c35-b136-a3d0cd5a2479", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.427Z", "modified": "2020-06-19T19:13:16.427Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.89.21.11", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 80, "dst_port": 50470, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fa22061d-cae2-4627-b65f-4e3efb09b38b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.427Z", "modified": "2020-06-19T19:13:16.427Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.65.74", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57660, "dst_port": 53281, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--23507bab-1007-4abe-a077-9983dd5d8f5c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.427Z", "modified": "2020-06-19T19:13:16.427Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54472, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a6555f75-b4ef-44cb-b863-85fdba1cb31d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.427Z", "modified": "2020-06-19T19:13:16.427Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54472, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:04:01.000Z", "end": "2019-10-20T01:05:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T01:04:01.000Z", "last_observed": "2019-10-20T01:04:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f01b1402-7bb0-49e8-ab3c-99d53fbb742c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.427Z", "modified": "2020-06-19T19:13:16.427Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.77.139", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 24563, "dst_port": 27017, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:03:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dbf47c99-e6e3-4821-b807-cf4bc1bbcbdf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.428Z", "modified": "2020-06-19T19:13:16.428Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54464, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:03:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--60974ead-8c30-4311-acaf-dbdba082456d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.428Z", "modified": "2020-06-19T19:13:16.428Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54464, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:03:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--06493315-d54b-4ed7-af3b-834fc2391d61", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.428Z", "modified": "2020-06-19T19:13:16.428Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.29", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43995, "dst_port": 5696, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:03:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a14585e0-a15d-4e80-b758-0cf79f60d672", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.428Z", "modified": "2020-06-19T19:13:16.428Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 51586, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:03:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7e8a82f7-1c88-46f3-9b5e-71721c6bce1d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.429Z", "modified": "2020-06-19T19:13:16.429Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54466, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d59003f6-39bb-40f1-b3f6-8c25d7cae370", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.429Z", "modified": "2020-06-19T19:13:16.429Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54466, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1c204c28-9bec-412b-b5bc-7ab7f7ab0d49", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.429Z", "modified": "2020-06-19T19:13:16.429Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51586, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:03:07.000Z", "end": "2019-10-20T01:04:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.66" } }, "first_observed": "2019-10-20T01:03:07.000Z", "last_observed": "2019-10-20T01:03:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--248b7166-1f3e-43b9-85f6-05244c4e3c5e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.429Z", "modified": "2020-06-19T19:13:16.429Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52652, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.125" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d327cfb9-6a45-492b-aa7e-b0ab7e21fff3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.429Z", "modified": "2020-06-19T19:13:16.429Z", "objects": { "0": { "type": "ipv4-addr", "value": "45.136.109.15", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51840, "dst_port": 33397, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9c415289-91a8-4fca-bf31-d83b0fb827cf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.430Z", "modified": "2020-06-19T19:13:16.430Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55680, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--07fe1a97-7093-4299-862f-85e2c63efe3d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.430Z", "modified": "2020-06-19T19:13:16.430Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.125", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52652, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1143ba6a-6a39-4c0a-a34e-8d9946a4fee5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.430Z", "modified": "2020-06-19T19:13:16.430Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55690, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:03:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7ba1ac87-370f-4947-9ba2-bd193087210a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.430Z", "modified": "2020-06-19T19:13:16.430Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55690, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:03:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--91c6a7c0-6558-494d-9917-6ec21688d097", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.430Z", "modified": "2020-06-19T19:13:16.430Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.216.140.180", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 61000, "dst_port": 3306, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4ba9f151-c10b-4e9b-8776-24013c457935", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.431Z", "modified": "2020-06-19T19:13:16.431Z", "objects": { "0": { "type": "ipv4-addr", "value": "175.143.145.146", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47899, "dst_port": 81, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f31c5352-d34b-4c35-b198-f5dfc1f13664", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.431Z", "modified": "2020-06-19T19:13:16.431Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55680, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eca19d18-8cf3-4bd7-950b-ac8f30d147e5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.431Z", "modified": "2020-06-19T19:13:16.431Z", "objects": { "0": { "type": "ipv4-addr", "value": "31.192.111.233", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 0, "dst_port": 0, "protocols": [ "icmp" ], "start": "2019-10-20T01:01:59.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:59.000Z", "last_observed": "2019-10-20T01:01:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7c741c49-5ebb-4f3f-a557-1e186346daee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.431Z", "modified": "2020-06-19T19:13:16.431Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 48862, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--875c1329-b63a-4818-aef5-25e3ac5e2382", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.431Z", "modified": "2020-06-19T19:13:16.431Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38894, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.144.93" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d1c9dd8c-7bd4-4e61-b683-3b06ffcb6166", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.431Z", "modified": "2020-06-19T19:13:16.431Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48862, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:02:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dd86a7da-6800-4e9b-b606-57c5149a74f8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.432Z", "modified": "2020-06-19T19:13:16.432Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 48860, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4ac8a67e-7212-4cab-ad49-3cabb3dbd00a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.432Z", "modified": "2020-06-19T19:13:16.432Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.72.250", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47700, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--72204f88-055f-44c6-94ac-dccbf2833f16", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.432Z", "modified": "2020-06-19T19:13:16.432Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48860, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fee666ca-7739-4227-9a68-f943f5a381dd", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.432Z", "modified": "2020-06-19T19:13:16.432Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.245.87.206", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48704, "dst_port": 33893, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--011a813a-52da-4ee0-90cf-5d904c5d4ec7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.433Z", "modified": "2020-06-19T19:13:16.433Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.144.93", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 38894, "protocols": [ "tcp" ], "start": "2019-10-20T01:01:02.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:01:02.000Z", "last_observed": "2019-10-20T01:01:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5aedf680-38d2-4e4c-a815-4113072bcd86", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.433Z", "modified": "2020-06-19T19:13:16.433Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48856, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--996f6fe9-f804-4ad7-93ee-37d38c318b09", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.433Z", "modified": "2020-06-19T19:13:16.433Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 34506, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--effa3e43-bf89-4afc-9bc7-6dc2370c8dc6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.433Z", "modified": "2020-06-19T19:13:16.433Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 48856, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:01:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f06e9d54-40e2-42a9-81a5-9532a80af948", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.433Z", "modified": "2020-06-19T19:13:16.433Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48854, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5613c6c5-2798-4ff1-ba6d-22ff4eb1baf8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.433Z", "modified": "2020-06-19T19:13:16.433Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.118.37.86", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55357, "dst_port": 356, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4f51cc5a-dc25-46e3-ab5f-3ff5bbd67144", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.434Z", "modified": "2020-06-19T19:13:16.434Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.88.240.4", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 5093, "dst_port": 5093, "protocols": [ "udp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c8d58e25-8e07-4511-a144-f17c8cc61a0b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.434Z", "modified": "2020-06-19T19:13:16.434Z", "objects": { "0": { "type": "ipv4-addr", "value": "118.166.120.209", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55413, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9d3465eb-b88c-4ad3-876b-c34bb798b29c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.434Z", "modified": "2020-06-19T19:13:16.434Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 48850, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ab01a9b7-730c-441d-8036-bda77464c7c9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.434Z", "modified": "2020-06-19T19:13:16.434Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 48850, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--02cc0e65-b37a-46b5-9aec-84a4723dec39", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.434Z", "modified": "2020-06-19T19:13:16.434Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44243, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c5007756-29da-405e-b3a6-5901312062d9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.435Z", "modified": "2020-06-19T19:13:16.435Z", "objects": { "0": { "type": "ipv4-addr", "value": "78.187.167.18", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51344, "dst_port": 8000, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--56975671-7cf1-4e35-ae1c-a65e1e5ee276", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.435Z", "modified": "2020-06-19T19:13:16.435Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 48854, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ca52b48c-ffb4-4abc-9304-da7aaaf3877f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.435Z", "modified": "2020-06-19T19:13:16.435Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57396, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6bcd5c68-b29e-4f50-94f5-a069a6448c14", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.435Z", "modified": "2020-06-19T19:13:16.435Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 34506, "protocols": [ "tcp" ], "start": "2019-10-20T01:00:01.000Z", "end": "2019-10-20T01:00:58.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-20T01:00:01.000Z", "last_observed": "2019-10-20T01:00:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bf9ff546-ac6e-4f8f-9e86-4925b9a6caf9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.435Z", "modified": "2020-06-19T19:13:16.435Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 37942, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.144.93" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--404f0434-8b5c-48fd-ac03-3f46fae2ec41", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.435Z", "modified": "2020-06-19T19:13:16.435Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53494, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9edcf206-c369-4b01-a980-300a5a428842", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.436Z", "modified": "2020-06-19T19:13:16.436Z", "objects": { "0": { "type": "ipv4-addr", "value": "45.136.109.15", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51840, "dst_port": 30503, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--302104a8-0985-4b03-9941-0da3393e841c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.436Z", "modified": "2020-06-19T19:13:16.436Z", "objects": { "0": { "type": "ipv4-addr", "value": "61.230.44.16", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38142, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f8c1b443-aadf-4deb-92bf-15d95648ec1c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.436Z", "modified": "2020-06-19T19:13:16.436Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.245.245.119", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 11084, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2353e50c-5e21-4d6d-8e9e-c3cd6e070953", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.436Z", "modified": "2020-06-19T19:13:16.436Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53492, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f4dfe3e8-524c-43e0-970e-f598b63e2f51", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.436Z", "modified": "2020-06-19T19:13:16.436Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.144.93", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 37942, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--01892b19-070a-4ef1-b4ff-d305c135de0f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.437Z", "modified": "2020-06-19T19:13:16.437Z", "objects": { "0": { "type": "ipv4-addr", "value": "122.54.17.194", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 65018, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8a25ecd7-c993-4f3c-acfa-d4311a50cf89", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.437Z", "modified": "2020-06-19T19:13:16.437Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53494, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--23cd2f5c-75b8-4021-817a-76c34e22ed01", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.437Z", "modified": "2020-06-19T19:13:16.437Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53492, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:58.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:58.000Z", "last_observed": "2019-10-19T23:08:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4c41ad10-0726-495f-8c00-806f9578067f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.437Z", "modified": "2020-06-19T19:13:16.437Z", "objects": { "0": { "type": "ipv4-addr", "value": "150.109.180.237", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35242, "dst_port": 60443, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:07.000Z", "end": "2019-10-19T23:08:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:07.000Z", "last_observed": "2019-10-19T23:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--01a11d12-f51b-4319-b237-b4e8fa3b1bb7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.438Z", "modified": "2020-06-19T19:13:16.438Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47902, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:07.000Z", "end": "2019-10-19T23:08:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T23:08:07.000Z", "last_observed": "2019-10-19T23:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--817ba81e-005c-476e-badf-7ff88cfa42f6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.438Z", "modified": "2020-06-19T19:13:16.438Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56952, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:07.000Z", "end": "2019-10-19T23:08:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:07.000Z", "last_observed": "2019-10-19T23:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f6c2e483-f73f-4865-8294-621fd0d44690", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.438Z", "modified": "2020-06-19T19:13:16.438Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47902, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:07.000Z", "end": "2019-10-19T23:08:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:07.000Z", "last_observed": "2019-10-19T23:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8120a980-101d-4a2f-8164-c56f32fbd4f5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.438Z", "modified": "2020-06-19T19:13:16.438Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56952, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:07.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-19T23:08:07.000Z", "last_observed": "2019-10-19T23:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b607e81f-d982-4833-8275-1ea1589544a5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.438Z", "modified": "2020-06-19T19:13:16.438Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53488, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:07.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T23:08:07.000Z", "last_observed": "2019-10-19T23:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f34057df-66ae-43f5-81f4-6387362f60af", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.439Z", "modified": "2020-06-19T19:13:16.439Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53488, "protocols": [ "tcp" ], "start": "2019-10-19T23:08:07.000Z", "end": "2019-10-19T23:09:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:08:07.000Z", "last_observed": "2019-10-19T23:08:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--adfefd19-e226-46d2-9db6-38bc35dae38b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.439Z", "modified": "2020-06-19T19:13:16.439Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47896, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d111f3d6-24a5-4fbb-b5f0-8e2be3a85585", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.439Z", "modified": "2020-06-19T19:13:16.439Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47896, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cdd6a2b3-6957-42d1-8611-d027a7d27a31", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.439Z", "modified": "2020-06-19T19:13:16.439Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.216.140.180", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 61000, "dst_port": 3306, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a09f0884-51e8-411d-9203-5b77c4da1163", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.440Z", "modified": "2020-06-19T19:13:16.440Z", "objects": { "0": { "type": "ipv4-addr", "value": "185.153.196.143", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52832, "dst_port": 4444, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--47b04d2c-12e0-43f1-a466-2d2e0e1ee238", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.440Z", "modified": "2020-06-19T19:13:16.440Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57348, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8ef24178-f82e-4c78-b3bb-1a32b284abc9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.440Z", "modified": "2020-06-19T19:13:16.440Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57348, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--96d20414-df40-45a3-afb0-c2a7348293a5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.440Z", "modified": "2020-06-19T19:13:16.440Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47898, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:08:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cef98ebe-53aa-4dee-9d12-2f48177b1e06", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.440Z", "modified": "2020-06-19T19:13:16.440Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47898, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:07:03.000Z", "end": "2019-10-19T23:08:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T23:07:03.000Z", "last_observed": "2019-10-19T23:07:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--72fcd981-e9b7-4e8a-9541-7d01d4b3cdda", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.441Z", "modified": "2020-06-19T19:13:16.441Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33534, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--496c4081-da1b-4bdd-9879-9f605dea51df", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.441Z", "modified": "2020-06-19T19:13:16.441Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53466, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8b7818b8-e61d-4d8b-a890-4cdb38aebf94", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.441Z", "modified": "2020-06-19T19:13:16.441Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53462, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--123cf3f7-b60a-4df4-9559-2ac194b947af", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.441Z", "modified": "2020-06-19T19:13:16.441Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53466, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c6bf43b8-5290-459c-b588-ab71dd0aae1c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.442Z", "modified": "2020-06-19T19:13:16.442Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53462, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3a2b6b8a-dca2-4f60-9b68-89bd51396299", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.442Z", "modified": "2020-06-19T19:13:16.442Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33534, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0f5779a3-5471-4097-a2ce-617ed8fdc2c7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.442Z", "modified": "2020-06-19T19:13:16.442Z", "objects": { "0": { "type": "ipv4-addr", "value": "202.107.227.42", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46303, "dst_port": 8118, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e7b69005-f46e-4e52-b802-bc0150dd34fb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.442Z", "modified": "2020-06-19T19:13:16.442Z", "objects": { "0": { "type": "ipv4-addr", "value": "136.233.4.230", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44055, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--722f86f9-8a44-4771-a439-1e7172281b5e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.442Z", "modified": "2020-06-19T19:13:16.442Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.97.26", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60286, "dst_port": 8443, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:06:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--23e4bf2e-76a9-481e-a20d-0f014c0f0f11", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.443Z", "modified": "2020-06-19T19:13:16.443Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47884, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--90b5615b-4337-44c6-87f1-57669f142002", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.443Z", "modified": "2020-06-19T19:13:16.443Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47884, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T23:06:07.000Z", "end": "2019-10-19T23:07:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T23:06:07.000Z", "last_observed": "2019-10-19T23:06:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ba29ba9e-3c63-483c-9d8c-dbf1fd42a931", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.443Z", "modified": "2020-06-19T19:13:16.443Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54556, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:49:07.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:49:07.000Z", "last_observed": "2019-10-19T22:49:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0a0e22a2-c160-4638-95ed-7c76c0202a2e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.443Z", "modified": "2020-06-19T19:13:16.443Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47744, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:49:07.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:49:07.000Z", "last_observed": "2019-10-19T22:49:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cdfcd64f-2707-4727-99df-9b23f8f5d5cf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.443Z", "modified": "2020-06-19T19:13:16.443Z", "objects": { "0": { "type": "ipv4-addr", "value": "59.127.34.226", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43576, "dst_port": 9527, "protocols": [ "tcp" ], "start": "2019-10-19T22:49:07.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:49:07.000Z", "last_observed": "2019-10-19T22:49:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b5e4325b-93d6-4b7a-8cd5-2435e3812a4d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.444Z", "modified": "2020-06-19T19:13:16.444Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57202, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:49:07.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-19T22:49:07.000Z", "last_observed": "2019-10-19T22:49:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--36b71b7e-4d19-4529-863e-b870f9dd2bc0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.444Z", "modified": "2020-06-19T19:13:16.444Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47744, "protocols": [ "tcp" ], "start": "2019-10-19T22:49:07.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:49:07.000Z", "last_observed": "2019-10-19T22:49:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--60b3ed7b-98d7-458f-a01f-00c2ab61515d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.444Z", "modified": "2020-06-19T19:13:16.444Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57202, "protocols": [ "tcp" ], "start": "2019-10-19T22:49:07.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:49:07.000Z", "last_observed": "2019-10-19T22:49:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--93658307-c154-4bc2-8ed2-36435be77eef", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.444Z", "modified": "2020-06-19T19:13:16.444Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54556, "protocols": [ "tcp" ], "start": "2019-10-19T22:49:07.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:49:07.000Z", "last_observed": "2019-10-19T22:49:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6761f9ec-b56c-4017-85b9-fc09bb61fb5a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.445Z", "modified": "2020-06-19T19:13:16.445Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43602, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.130.85" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--89be90fa-8c64-4b11-8be7-572b8be5dad7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.445Z", "modified": "2020-06-19T19:13:16.445Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57642, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.12.86" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ff885fb3-90c5-454b-8172-973871743dfc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.445Z", "modified": "2020-06-19T19:13:16.445Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47736, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a119464e-12ae-4e41-8f1d-308e79cd9d46", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.445Z", "modified": "2020-06-19T19:13:16.445Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.12.86", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57642, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--95ebb7cf-1d5e-4f84-81ef-230cf4d46178", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.446Z", "modified": "2020-06-19T19:13:16.446Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49592, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.108.221" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--545bcd5a-2e30-4976-ba91-7dd2f910a036", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.446Z", "modified": "2020-06-19T19:13:16.446Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57640, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.12.86" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c30bbfc7-9340-4163-b3ea-ad24e13fd044", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.446Z", "modified": "2020-06-19T19:13:16.446Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43604, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.130.85" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--257a258f-fa64-4147-8aba-a4bc5045b91e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.446Z", "modified": "2020-06-19T19:13:16.446Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57638, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.12.86" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--acf0dda0-7265-4129-8f5e-635cdc9427b2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.446Z", "modified": "2020-06-19T19:13:16.446Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.12.86", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57640, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c3c8fff3-b9c9-49fc-aa17-7bc38f0fda59", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.447Z", "modified": "2020-06-19T19:13:16.447Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.108.221", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 49592, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e62fe9a7-e38e-4822-b806-8f96d15acfa8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.447Z", "modified": "2020-06-19T19:13:16.447Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 43348, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f2de4035-ed0c-4915-9d7d-e742b256d718", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.447Z", "modified": "2020-06-19T19:13:16.447Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57636, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.12.86" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--487e8bac-ed19-49d1-9278-5f69e6c77a10", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.447Z", "modified": "2020-06-19T19:13:16.447Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47736, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--590a04fa-10c6-4c0e-ac08-d4db925e84f5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.447Z", "modified": "2020-06-19T19:13:16.447Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43606, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.130.85" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--594a9e6a-ad1d-4327-bf6b-236575caef56", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.448Z", "modified": "2020-06-19T19:13:16.448Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.130.85", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 43604, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--279303e1-0730-4c2c-a985-2875a332344c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.448Z", "modified": "2020-06-19T19:13:16.448Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.130.85", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 43602, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b4bcc712-6cfa-48fc-bdd3-5352ebc73663", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.448Z", "modified": "2020-06-19T19:13:16.448Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.130.85", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 43608, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d776d729-f760-46d8-b69d-a38ca2075bf0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.448Z", "modified": "2020-06-19T19:13:16.448Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43608, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.130.85" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1b48ff15-9b0d-4e59-9fd9-1d5c32f50c35", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.449Z", "modified": "2020-06-19T19:13:16.449Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.130.85", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 43606, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--837cc1de-08fc-48b9-b898-00dab4700045", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.449Z", "modified": "2020-06-19T19:13:16.449Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.12.86", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57636, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a0c19a02-5c41-4d10-b9d7-cb566113cb20", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.449Z", "modified": "2020-06-19T19:13:16.449Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.12.86", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57638, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bdb899ba-d430-4ddf-93f9-b876e8a9f82c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.449Z", "modified": "2020-06-19T19:13:16.449Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.252", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38316, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cfea7883-4128-4084-a998-994da2ec357c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.449Z", "modified": "2020-06-19T19:13:16.449Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43348, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--14788cf1-5852-4c34-8491-270ceea4723b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.450Z", "modified": "2020-06-19T19:13:16.450Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54552, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e63fa9c0-99df-49d8-a839-40c97864da7f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.450Z", "modified": "2020-06-19T19:13:16.450Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54552, "protocols": [ "tcp" ], "start": "2019-10-19T22:48:02.000Z", "end": "2019-10-19T22:49:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:48:02.000Z", "last_observed": "2019-10-19T22:48:02.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3091f30c-b9ea-48c9-985d-6149a93c0f87", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.450Z", "modified": "2020-06-19T19:13:16.450Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54510, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:47:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:47:01.000Z", "last_observed": "2019-10-19T22:47:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6bd2c750-9811-41c8-86f2-ff02992bcc9a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.451Z", "modified": "2020-06-19T19:13:16.451Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.144.93", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 37722, "protocols": [ "tcp" ], "start": "2019-10-19T22:47:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:47:01.000Z", "last_observed": "2019-10-19T22:47:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0d51c229-f5c6-4b23-b508-be3a4e2b19e2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.451Z", "modified": "2020-06-19T19:13:16.451Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54510, "protocols": [ "tcp" ], "start": "2019-10-19T22:47:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:47:01.000Z", "last_observed": "2019-10-19T22:47:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--362d2cec-9904-4c7b-8269-f4cb35c43333", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.451Z", "modified": "2020-06-19T19:13:16.451Z", "objects": { "0": { "type": "ipv4-addr", "value": "186.136.18.151", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 61294, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-19T22:47:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:47:01.000Z", "last_observed": "2019-10-19T22:47:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6d3bac97-48a2-4aaa-958e-01cf18120940", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.451Z", "modified": "2020-06-19T19:13:16.451Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 37722, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:47:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.144.93" } }, "first_observed": "2019-10-19T22:47:01.000Z", "last_observed": "2019-10-19T22:47:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--db2c9c85-a68d-4f8d-8a5f-4c9667fd8c48", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.451Z", "modified": "2020-06-19T19:13:16.451Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47698, "protocols": [ "tcp" ], "start": "2019-10-19T22:47:01.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:47:01.000Z", "last_observed": "2019-10-19T22:47:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--03de0600-de0c-455b-81a1-8683d402391e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.452Z", "modified": "2020-06-19T19:13:16.452Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47698, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:47:01.000Z", "end": "2019-10-19T22:48:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:47:01.000Z", "last_observed": "2019-10-19T22:47:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--20e16527-59eb-4f60-9167-edf8a0907d85", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.452Z", "modified": "2020-06-19T19:13:16.452Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.119.160.97", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52374, "dst_port": 1919, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c7dd24c1-afd4-4254-a679-f970ca7f0aee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.452Z", "modified": "2020-06-19T19:13:16.452Z", "objects": { "0": { "type": "ipv4-addr", "value": "202.38.173.238", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46757, "dst_port": 6379, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d455ede8-aa97-47f2-a51a-2a155e5ee361", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.452Z", "modified": "2020-06-19T19:13:16.452Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33334, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ad194184-6c8a-4b1e-afb9-53b4ffbe463f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.452Z", "modified": "2020-06-19T19:13:16.452Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47682, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--829390da-51bb-41b3-a9e2-ff7de3d1f205", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.453Z", "modified": "2020-06-19T19:13:16.453Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.160.193", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51840, "dst_port": 5707, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a65beebf-7461-44f4-9c00-ff14c1ac71a8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.453Z", "modified": "2020-06-19T19:13:16.453Z", "objects": { "0": { "type": "ipv4-addr", "value": "14.239.72.199", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51735, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a0530e0f-2f38-435e-b1f6-ccb891d49f64", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.453Z", "modified": "2020-06-19T19:13:16.453Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47682, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cc2f8530-1e63-4008-b20c-1794934cb848", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.453Z", "modified": "2020-06-19T19:13:16.453Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33334, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1f76f859-e869-4157-b2d4-2b8517098671", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.454Z", "modified": "2020-06-19T19:13:16.454Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54498, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--546313dd-9d47-49f7-b446-8faef3791c05", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.454Z", "modified": "2020-06-19T19:13:16.454Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54498, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:46:01.000Z", "end": "2019-10-19T22:47:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:46:01.000Z", "last_observed": "2019-10-19T22:46:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--701711cb-16c3-4ad2-8196-0dff24885469", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.454Z", "modified": "2020-06-19T19:13:16.454Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39723, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1bf6c523-dea3-44aa-b03b-1231ededc381", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.454Z", "modified": "2020-06-19T19:13:16.454Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 56168, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "199.19.224.191" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--007c4f3b-41eb-421c-b745-4bbd411dd259", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.454Z", "modified": "2020-06-19T19:13:16.454Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56726, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cfd2ee7c-ad38-416f-b4c8-71173b955f0e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.455Z", "modified": "2020-06-19T19:13:16.455Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53260, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fb4c4ca9-17c1-47b7-91e6-3d3f55d50d55", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.455Z", "modified": "2020-06-19T19:13:16.455Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43282, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0136d39c-3216-4b12-8852-0fc4e806ba7d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.455Z", "modified": "2020-06-19T19:13:16.455Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47678, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--54af568c-074b-4406-bc50-043e56ef0342", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.455Z", "modified": "2020-06-19T19:13:16.455Z", "objects": { "0": { "type": "ipv4-addr", "value": "95.105.234.222", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54567, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--54babd3d-42db-40d5-813f-5a761008858f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.455Z", "modified": "2020-06-19T19:13:16.455Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.72.250", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35227, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--078681d2-0e7c-421b-9e53-b86e0f2ac302", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.456Z", "modified": "2020-06-19T19:13:16.456Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.83.69.99", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 45663, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e6dc20d7-7b94-4ef7-8c31-0ab71956986f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.456Z", "modified": "2020-06-19T19:13:16.456Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53260, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1b2c2071-0a25-4068-aba9-402458b34c2f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.456Z", "modified": "2020-06-19T19:13:16.456Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56726, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--00074296-b8f2-46a6-9370-1a21056df5f0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.457Z", "modified": "2020-06-19T19:13:16.457Z", "objects": { "0": { "type": "ipv4-addr", "value": "34.244.218.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55806, "dst_port": 11211, "protocols": [ "udp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7371342c-1d84-47ed-b88d-e78376855863", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.457Z", "modified": "2020-06-19T19:13:16.457Z", "objects": { "0": { "type": "ipv4-addr", "value": "199.19.224.191", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56168, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--25f46ff1-e7b5-4e8c-8e0e-c1af0ac21c31", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.457Z", "modified": "2020-06-19T19:13:16.457Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53256, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2abf02a0-ba5d-4c14-b2d1-2badaf2912a1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.457Z", "modified": "2020-06-19T19:13:16.457Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.64.127", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 8080, "dst_port": 20202, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:45:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bbca1bfb-1ce8-40a8-9905-8cb077ebb54f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.457Z", "modified": "2020-06-19T19:13:16.457Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47678, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:45:01.000Z", "end": "2019-10-19T22:46:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:45:01.000Z", "last_observed": "2019-10-19T22:45:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--91c7b006-a75c-4e64-8b22-46d1bddd7d3b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.458Z", "modified": "2020-06-19T19:13:16.458Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47518, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--586c1fb9-0fce-442d-be81-cfa270c4a8cb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.458Z", "modified": "2020-06-19T19:13:16.458Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.146", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55350, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f35fe4d7-e978-4f70-9cd6-fc08b197dc05", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.458Z", "modified": "2020-06-19T19:13:16.458Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56839, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--137073a1-f922-4b97-8e8d-94b415d46ba2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.458Z", "modified": "2020-06-19T19:13:16.458Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.174.215", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42193, "dst_port": 8089, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1eb97b30-5792-4e76-99fc-c38f1aedfade", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.459Z", "modified": "2020-06-19T19:13:16.459Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47518, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4f0ba93c-24f3-4307-a56e-63e84acb084e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.459Z", "modified": "2020-06-19T19:13:16.459Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55350, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.146" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f1172541-7609-4d3b-bb2b-044dd31fe964", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.459Z", "modified": "2020-06-19T19:13:16.459Z", "objects": { "0": { "type": "ipv4-addr", "value": "114.47.98.151", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46578, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4ea0be5f-7a89-4b17-9e46-bf13aaa1f5e6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.459Z", "modified": "2020-06-19T19:13:16.459Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47514, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a3081389-f276-4dda-868f-d52f4244eb4d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.460Z", "modified": "2020-06-19T19:13:16.460Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47514, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9aab04d3-e9f4-4dbb-875f-0754e61a6ec8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.460Z", "modified": "2020-06-19T19:13:16.460Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.241.145.159", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 2317, "dst_port": 80, "protocols": [ "tcp" ], "start": "2019-10-19T22:25:01.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:25:01.000Z", "last_observed": "2019-10-19T22:25:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--31f32db5-38a9-49ff-8300-6c003e97525a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.460Z", "modified": "2020-06-19T19:13:16.460Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54322, "protocols": [ "tcp" ], "start": "2019-10-19T22:24:07.000Z", "end": "2019-10-19T22:24:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:24:07.000Z", "last_observed": "2019-10-19T22:24:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9ff021bc-0189-43b0-8ae0-30857b915b05", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.460Z", "modified": "2020-06-19T19:13:16.460Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.158.105", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 57548, "protocols": [ "tcp" ], "start": "2019-10-19T22:24:07.000Z", "end": "2019-10-19T22:24:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:24:07.000Z", "last_observed": "2019-10-19T22:24:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--01536ab1-4419-4c7c-96cc-8cd08eb8e6b6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.460Z", "modified": "2020-06-19T19:13:16.460Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54322, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:24:07.000Z", "end": "2019-10-19T22:24:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:24:07.000Z", "last_observed": "2019-10-19T22:24:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--43d07294-4baa-49a0-ae64-c1364e53b071", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.461Z", "modified": "2020-06-19T19:13:16.461Z", "objects": { "0": { "type": "ipv4-addr", "value": "178.21.50.2", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 13693, "dst_port": 5555, "protocols": [ "tcp" ], "start": "2019-10-19T22:24:07.000Z", "end": "2019-10-19T22:24:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:24:07.000Z", "last_observed": "2019-10-19T22:24:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5ec12edb-0489-4f18-96eb-e383d8e36823", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.461Z", "modified": "2020-06-19T19:13:16.461Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47512, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:24:07.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:24:07.000Z", "last_observed": "2019-10-19T22:24:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--47f4de88-a588-48f9-80a2-9370b903f935", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.461Z", "modified": "2020-06-19T19:13:16.461Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47512, "protocols": [ "tcp" ], "start": "2019-10-19T22:24:07.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:24:07.000Z", "last_observed": "2019-10-19T22:24:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ace4f0ee-7196-4e5a-be8b-8c6e1deb4489", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.461Z", "modified": "2020-06-19T19:13:16.461Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57548, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:24:07.000Z", "end": "2019-10-19T22:25:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.158.105" } }, "first_observed": "2019-10-19T22:24:07.000Z", "last_observed": "2019-10-19T22:24:07.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bfe70988-7d82-484f-917a-4b213ffa3054", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.461Z", "modified": "2020-06-19T19:13:16.461Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.252", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38006, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--27d34a3e-9b66-41a5-9bec-5d0ccd585835", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.462Z", "modified": "2020-06-19T19:13:16.462Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.146", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55330, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e391f1f5-e05f-45cf-a87f-4bfb6d1f40be", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.462Z", "modified": "2020-06-19T19:13:16.462Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53078, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3585b0ed-db8f-4144-9707-dc23bbdd8d28", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.462Z", "modified": "2020-06-19T19:13:16.462Z", "objects": { "0": { "type": "ipv4-addr", "value": "120.52.152.17", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58914, "dst_port": 8800, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--49a158f7-8d0e-445e-9a46-7470fe1aba85", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.462Z", "modified": "2020-06-19T19:13:16.462Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.245.245.119", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 11084, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--affecffe-3697-48a0-b478-9a686a855485", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.462Z", "modified": "2020-06-19T19:13:16.462Z", "objects": { "0": { "type": "ipv4-addr", "value": "139.162.72.191", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33075, "dst_port": 3127, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--236568ae-b898-495c-9b7b-a61c979355f5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.463Z", "modified": "2020-06-19T19:13:16.463Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.157.70", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 38484, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--983a834c-8b2e-4cfe-b245-d308958e5834", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.463Z", "modified": "2020-06-19T19:13:16.463Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53078, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0e61e620-bf8b-499c-9bc7-f9ed4cf3acea", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.463Z", "modified": "2020-06-19T19:13:16.463Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38484, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.157.70" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a1185b22-d5b7-4bd0-973d-9b5d2b8e7e7f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.463Z", "modified": "2020-06-19T19:13:16.463Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55330, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.146" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2711c789-a1fc-46a3-b74b-b8cb0e100faa", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.464Z", "modified": "2020-06-19T19:13:16.464Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54320, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:24:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e61a3e3d-7f1d-4b4b-b62a-6ee78e3393d7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.464Z", "modified": "2020-06-19T19:13:16.464Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54320, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:58.000Z", "end": "2019-10-19T22:24:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:22:58.000Z", "last_observed": "2019-10-19T22:22:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e2ce08c6-a140-4a36-9da0-60b80764c34a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.464Z", "modified": "2020-06-19T19:13:16.464Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.60", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56040, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9a85cc45-b9b8-43f1-8794-bf68967be1f8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.464Z", "modified": "2020-06-19T19:13:16.464Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47488, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0c39b082-ac19-4588-9c67-37d0394ba8dc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.464Z", "modified": "2020-06-19T19:13:16.464Z", "objects": { "0": { "type": "ipv4-addr", "value": "183.2.202.41", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 5084, "dst_port": 5060, "protocols": [ "udp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--931af404-df3c-4f2f-8697-14ac6e1b0f29", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.465Z", "modified": "2020-06-19T19:13:16.465Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47488, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ae5a72a6-e681-4325-bbea-489b2c6613f0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.465Z", "modified": "2020-06-19T19:13:16.465Z", "objects": { "0": { "type": "ipv4-addr", "value": "116.31.109.176", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39922, "dst_port": 80, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7e980e84-d099-42d1-97f2-e37373deeb5c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.465Z", "modified": "2020-06-19T19:13:16.465Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.162.136", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59268, "dst_port": 8089, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3139cd5c-430d-4ef2-9202-4e0182f9b12f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.465Z", "modified": "2020-06-19T19:13:16.465Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53076, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cb4ccf64-a5d6-4f68-b95d-75b640c8508e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.466Z", "modified": "2020-06-19T19:13:16.466Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53076, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--53264e65-5bb7-47c2-bb6f-111d4d5f2e9d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.466Z", "modified": "2020-06-19T19:13:16.466Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56040, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:22:01.000Z", "end": "2019-10-19T22:23:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-19T22:22:01.000Z", "last_observed": "2019-10-19T22:22:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--77cf78a3-1ced-4633-8e0e-7891f9ed0225", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.466Z", "modified": "2020-06-19T19:13:16.466Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47478, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7adb9850-6058-4f06-8656-970905695881", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.466Z", "modified": "2020-06-19T19:13:16.466Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54288, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--185bb450-9142-444d-aeb6-07626c3525e4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.466Z", "modified": "2020-06-19T19:13:16.466Z", "objects": { "0": { "type": "ipv4-addr", "value": "192.3.70.136", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 62159, "dst_port": 6379, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f14d995c-072d-4635-91b5-991e43981e93", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.467Z", "modified": "2020-06-19T19:13:16.467Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54288, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ebbed4fa-7e67-4888-aed0-0400840df6a9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.467Z", "modified": "2020-06-19T19:13:16.467Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.230", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42385, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4ac4fad8-be81-4f79-b072-ec54b6b233ac", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.467Z", "modified": "2020-06-19T19:13:16.467Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 33130, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4b4a650d-9cc4-4c56-a61f-6152c71eea44", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.467Z", "modified": "2020-06-19T19:13:16.467Z", "objects": { "0": { "type": "ipv4-addr", "value": "61.170.206.184", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44720, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ee316688-8283-408a-8eb6-564bb2307ab5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.467Z", "modified": "2020-06-19T19:13:16.467Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.82.78.100", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55249, "dst_port": 1070, "protocols": [ "udp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--55db2f26-a697-4c12-b0f5-c2fabfe821c1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.468Z", "modified": "2020-06-19T19:13:16.468Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.119.160.6", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 8080, "dst_port": 33892, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8cb8da4f-df0a-47e2-816c-9ad7f0225797", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.468Z", "modified": "2020-06-19T19:13:16.468Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 33130, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--734073d9-4609-40fe-8dd9-cf91f41e7e6f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.468Z", "modified": "2020-06-19T19:13:16.468Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47478, "protocols": [ "tcp" ], "start": "2019-10-19T22:21:06.000Z", "end": "2019-10-19T22:22:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:21:06.000Z", "last_observed": "2019-10-19T22:21:06.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7d2729f9-9cee-4222-a4b5-bafb30e1f0f3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.468Z", "modified": "2020-06-19T19:13:16.468Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53052, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--11ae4dfb-a02b-4d13-9c1f-f4f43843453a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.468Z", "modified": "2020-06-19T19:13:16.469Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53050, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--45375fd2-d876-4e51-a0e0-09ff2ca2d7ed", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.469Z", "modified": "2020-06-19T19:13:16.469Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.96.50", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56799, "dst_port": 5901, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5e24c2e2-d6ae-4a8c-94f9-511d86363d6d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.469Z", "modified": "2020-06-19T19:13:16.469Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.105.91.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54722, "dst_port": 14344, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--92de115b-ad2a-46bf-82df-4a7506790e94", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.469Z", "modified": "2020-06-19T19:13:16.469Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53052, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--64891ac4-8b70-4388-b720-e72ce2103615", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.469Z", "modified": "2020-06-19T19:13:16.469Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 44989, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--642b0c01-407c-4475-b3b2-3f6715b4f4e0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.470Z", "modified": "2020-06-19T19:13:16.470Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53050, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d77c8c2c-7912-4af7-aa87-818b1ce975ef", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.470Z", "modified": "2020-06-19T19:13:16.470Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.97.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 64650, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--464f8142-9461-42da-899c-b96c9c513a47", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.470Z", "modified": "2020-06-19T19:13:16.470Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56522, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:20:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1c95d1a8-9656-4ab9-a327-ac81a6277431", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.470Z", "modified": "2020-06-19T19:13:16.470Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54286, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6aaf5e74-e2bc-4c6a-88b5-a00561285bd6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.470Z", "modified": "2020-06-19T19:13:16.470Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56522, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--77a50554-faa6-421c-b95e-298ddd36fdfa", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.471Z", "modified": "2020-06-19T19:13:16.471Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54286, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T22:20:03.000Z", "end": "2019-10-19T22:21:56.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T22:20:03.000Z", "last_observed": "2019-10-19T22:20:03.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5a3c2249-d3df-4a92-8ae8-70e78888319e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.471Z", "modified": "2020-06-19T19:13:16.471Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56526, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9dbcfb21-acf3-4acf-bf03-a8e681246539", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.471Z", "modified": "2020-06-19T19:13:16.471Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.37.100.98", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51713, "dst_port": 82, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1715b94e-eb54-40be-9bbc-13cb9233263b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.471Z", "modified": "2020-06-19T19:13:16.471Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56526, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--76d5e59c-9776-4cc0-9dab-367d47daec28", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.471Z", "modified": "2020-06-19T19:13:16.471Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.245.245.119", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 11084, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4a96fc44-d2a1-41f4-8939-51aefe9b2aa3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.472Z", "modified": "2020-06-19T19:13:16.472Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47062, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5b5eac4b-20ca-4597-985e-d8c54ac28e15", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.472Z", "modified": "2020-06-19T19:13:16.472Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47062, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b7ef895a-700c-4651-8f30-ec594966b39b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.472Z", "modified": "2020-06-19T19:13:16.472Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47066, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--947792ec-6c2a-4b65-b836-568473ff3045", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.472Z", "modified": "2020-06-19T19:13:16.472Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 39166, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--44086df9-1201-42fb-a005-7128e634270a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.473Z", "modified": "2020-06-19T19:13:16.473Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47066, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bd49c246-fc61-4cd0-9fe4-e53761ba8164", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.473Z", "modified": "2020-06-19T19:13:16.473Z", "objects": { "0": { "type": "ipv4-addr", "value": "169.197.108.189", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 36956, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:28:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:28:55.000Z", "last_observed": "2019-10-19T21:28:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--08d39a74-1a8a-40b8-805d-b2f39d8531bb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.473Z", "modified": "2020-06-19T19:13:16.473Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47060, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--60c7852c-3689-4c13-9b2a-dd382d1859ba", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.473Z", "modified": "2020-06-19T19:13:16.473Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60944, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.71" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--00a5d874-91d4-4879-a048-051cc8386c7e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.473Z", "modified": "2020-06-19T19:13:16.473Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47060, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:29:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f7631fe3-dc43-47c4-916c-4a98a5ac79c7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.474Z", "modified": "2020-06-19T19:13:16.474Z", "objects": { "0": { "type": "ipv4-addr", "value": "209.17.96.218", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59477, "dst_port": 118, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fd75912c-4096-450c-a3f2-105de97e5f8f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.474Z", "modified": "2020-06-19T19:13:16.474Z", "objects": { "0": { "type": "ipv4-addr", "value": "157.230.27.9", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 59553, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c9392bcc-ba71-44e4-ac48-9275a95cc356", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.474Z", "modified": "2020-06-19T19:13:16.474Z", "objects": { "0": { "type": "ipv4-addr", "value": "146.0.75.203", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57967, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1e3d1af3-d817-4546-bc56-bd9d1d8bca93", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.474Z", "modified": "2020-06-19T19:13:16.474Z", "objects": { "0": { "type": "ipv4-addr", "value": "120.86.227.254", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 1648, "dst_port": 8081, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0605335b-a559-4b67-969f-e82926c83507", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.474Z", "modified": "2020-06-19T19:13:16.474Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.25.71", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 60944, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e0af5314-8b7a-4561-a679-759b1dde45ff", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.474Z", "modified": "2020-06-19T19:13:16.474Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.104.125.180", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 60396, "dst_port": 8443, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b5120fd2-f38e-4acc-9519-28162069f98e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.475Z", "modified": "2020-06-19T19:13:16.475Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47056, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--91f340c4-c4de-4e54-9514-d9d57a541be0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.475Z", "modified": "2020-06-19T19:13:16.475Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47056, "protocols": [ "tcp" ], "start": "2019-10-19T21:27:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:27:55.000Z", "last_observed": "2019-10-19T21:27:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--489b10ff-d05c-4a8f-8705-feeca04abddf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.475Z", "modified": "2020-06-19T19:13:16.475Z", "objects": { "0": { "type": "ipv4-addr", "value": "91.189.89.198", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 123, "dst_port": 38288, "protocols": [ "udp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9f4b2c9c-9993-4f25-ba3d-bab5f769b915", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.475Z", "modified": "2020-06-19T19:13:16.475Z", "objects": { "0": { "type": "ipv4-addr", "value": "71.6.233.239", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 8080, "dst_port": 8080, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f1827cb6-e07c-4871-8dfa-f2316b6e9e4a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.475Z", "modified": "2020-06-19T19:13:16.475Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.146", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54886, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a60e6573-9a33-4bf6-8684-52679a92bbce", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.475Z", "modified": "2020-06-19T19:13:16.475Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38288, "dst_port": 123, "protocols": [ "udp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "91.189.89.198" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7aa1d62b-041e-4bbd-80aa-58bb120c6aa3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.476Z", "modified": "2020-06-19T19:13:16.476Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47054, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--496b6494-5628-485a-bb1d-780e2b98f485", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.476Z", "modified": "2020-06-19T19:13:16.476Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54886, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:28:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.146" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--476ccdc8-b521-49bf-97a7-3412c81d00f5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.476Z", "modified": "2020-06-19T19:13:16.476Z", "objects": { "0": { "type": "ipv4-addr", "value": "60.178.118.182", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 43046, "dst_port": 3306, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--48b854ed-f2e1-47ac-99d3-b2221fcd9ab9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.476Z", "modified": "2020-06-19T19:13:16.476Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47054, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:55.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:55.000Z", "last_observed": "2019-10-19T21:26:55.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0e2e0fc1-878b-4969-a8dc-08b0e7acb2bf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.476Z", "modified": "2020-06-19T19:13:16.476Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47036, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3dac75f9-4f2d-4311-8ae3-8378e40f16f3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.477Z", "modified": "2020-06-19T19:13:16.477Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 47036, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7608116e-daa4-4bf1-af1a-6d8163432709", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.477Z", "modified": "2020-06-19T19:13:16.477Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52624, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--569276cf-e917-4686-bfd5-e34cd20de6a0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.477Z", "modified": "2020-06-19T19:13:16.477Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56622, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d52e556f-a170-42f5-916c-1c1b1b2adee1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.477Z", "modified": "2020-06-19T19:13:16.477Z", "objects": { "0": { "type": "ipv4-addr", "value": "23.254.229.111", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38147, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3357d2ff-9888-4844-a8bf-11e4ac717106", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.477Z", "modified": "2020-06-19T19:13:16.477Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56622, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--22418dd4-401f-46aa-8e0a-ac117a206e8b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.477Z", "modified": "2020-06-19T19:13:16.477Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52634, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1fe17677-992a-4b36-81f3-832d858293f0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.477Z", "modified": "2020-06-19T19:13:16.478Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52634, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:27:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--838d5dce-6c69-4f1a-b880-c7f68e0dc1f4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.478Z", "modified": "2020-06-19T19:13:16.478Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52624, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7816ade4-8854-4a71-b8f6-1311066ad366", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.478Z", "modified": "2020-06-19T19:13:16.478Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49740, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:26:01.000Z", "end": "2019-10-19T21:26:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.66" } }, "first_observed": "2019-10-19T21:26:01.000Z", "last_observed": "2019-10-19T21:26:01.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fdf6b739-10a6-4c31-bafd-fa4c3db6e666", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.478Z", "modified": "2020-06-19T19:13:16.478Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 49656, "protocols": [ "tcp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6bf39111-4a04-4b21-bfea-5a0b5724a1ed", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.478Z", "modified": "2020-06-19T19:13:16.478Z", "objects": { "0": { "type": "ipv4-addr", "value": "77.247.110.39", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 5066, "dst_port": 17368, "protocols": [ "udp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a483840f-9155-4893-a058-858e9f43a1b0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.478Z", "modified": "2020-06-19T19:13:16.478Z", "objects": { "0": { "type": "ipv4-addr", "value": "103.70.155.68", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 31165, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b20389e5-9a5e-47a1-9438-141d9b6daee5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.479Z", "modified": "2020-06-19T19:13:16.479Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52534, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bf5980a3-e70c-450d-bcdc-b4f5a3336541", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.479Z", "modified": "2020-06-19T19:13:16.479Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52534, "protocols": [ "tcp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9f7e67bf-17ca-46bb-ad8e-769d69e1dd9f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.479Z", "modified": "2020-06-19T19:13:16.479Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52536, "protocols": [ "tcp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e3591e64-2d86-454c-b965-ff8ce28280ee", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.479Z", "modified": "2020-06-19T19:13:16.479Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49656, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.66" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f355bfe4-a6de-4389-adb1-e761388d3a6b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.479Z", "modified": "2020-06-19T19:13:16.479Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52536, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:13:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:13:59.000Z", "last_observed": "2019-10-19T21:13:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--60c943e9-cdfc-4b1e-a183-6194a0a7963e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.479Z", "modified": "2020-06-19T19:13:16.479Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46944, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eeb124b2-32d3-4bcc-8a78-0e373b76e0e8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.480Z", "modified": "2020-06-19T19:13:16.480Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58140, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.38" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--530145d4-52e8-45a3-9bd2-0f735aef09a4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.480Z", "modified": "2020-06-19T19:13:16.480Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.119.160.6", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 8080, "dst_port": 3394, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7443cfcf-861c-4994-9800-78765b506cd0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.480Z", "modified": "2020-06-19T19:13:16.480Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.38", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58140, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--540e701a-49de-457c-84e1-1f35cf111750", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.480Z", "modified": "2020-06-19T19:13:16.480Z", "objects": { "0": { "type": "ipv4-addr", "value": "221.162.132.55", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 64166, "dst_port": 9001, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5e329270-0702-448e-ae35-9423a9aba371", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.480Z", "modified": "2020-06-19T19:13:16.480Z", "objects": { "0": { "type": "ipv4-addr", "value": "103.206.129.101", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53558, "dst_port": 445, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--70908b0b-1838-4b5a-be82-211b5507742e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.480Z", "modified": "2020-06-19T19:13:16.480Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.53.65.52", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40966, "dst_port": 5063, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--845bcc1c-f630-4fa9-8ef9-31b00fa64796", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.481Z", "modified": "2020-06-19T19:13:16.481Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46944, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6f090314-3f28-45fb-bdfb-99f6b24efb01", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.481Z", "modified": "2020-06-19T19:13:16.481Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46946, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2b4cc2d7-b17a-4893-a823-426c134d0ae6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.481Z", "modified": "2020-06-19T19:13:16.481Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46946, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:12:59.000Z", "end": "2019-10-19T21:14:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:12:59.000Z", "last_observed": "2019-10-19T21:12:59.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--100e7c00-e640-4235-a838-ec72273c1580", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.481Z", "modified": "2020-06-19T19:13:16.481Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42548, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2761d0fe-370d-474d-8bab-328b837d8d02", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.481Z", "modified": "2020-06-19T19:13:16.481Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56522, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--8b50110d-e06b-4e6f-bc96-fbb8360645f6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.482Z", "modified": "2020-06-19T19:13:16.482Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46936, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2969f4f9-3fc9-4523-a134-00c60e9e2754", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.482Z", "modified": "2020-06-19T19:13:16.482Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46936, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--33c5825a-1fe6-433c-92c4-60616a936928", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.482Z", "modified": "2020-06-19T19:13:16.482Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 42548, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3cec8085-9d7b-4ece-95eb-d3fa6bc6a1f6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.482Z", "modified": "2020-06-19T19:13:16.482Z", "objects": { "0": { "type": "ipv4-addr", "value": "80.211.153.138", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41258, "dst_port": 53945, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--eeeff465-4e52-424f-9872-ec296ab5b1ca", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.482Z", "modified": "2020-06-19T19:13:16.482Z", "objects": { "0": { "type": "ipv4-addr", "value": "77.247.108.119", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54934, "dst_port": 8005, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bfe7c1dc-687d-4eeb-aa5f-8f2e3415d409", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.483Z", "modified": "2020-06-19T19:13:16.483Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46940, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c4d4f496-02e9-4e52-b2e3-57466a532e1c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.483Z", "modified": "2020-06-19T19:13:16.483Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46940, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9067c620-d4bd-4ad2-99a5-d3d8113fbc0d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.483Z", "modified": "2020-06-19T19:13:16.483Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56522, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:11:57.000Z", "end": "2019-10-19T21:13:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-19T21:11:57.000Z", "last_observed": "2019-10-19T21:11:57.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3b41ad4e-90ce-4bb3-be80-ea97b7c70a17", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.483Z", "modified": "2020-06-19T19:13:16.483Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.175", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56382, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--ec5e0c1e-6012-4d06-ba97-15c7f5411cb0", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.484Z", "modified": "2020-06-19T19:13:16.484Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.104.124.229", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41077, "dst_port": 8888, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--45e9e9ef-d836-4456-95de-0366c515507c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.484Z", "modified": "2020-06-19T19:13:16.484Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52506, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a3cd844d-9335-4e2a-80c6-b188f8869e99", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.484Z", "modified": "2020-06-19T19:13:16.484Z", "objects": { "0": { "type": "ipv4-addr", "value": "159.203.193.252", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 40396, "dst_port": 1414, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f2865673-1e89-46c4-964d-c9502a42ccfb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.484Z", "modified": "2020-06-19T19:13:16.484Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52506, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5a1ca216-c6f7-48bf-8614-7aa0567a1235", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.484Z", "modified": "2020-06-19T19:13:16.484Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56382, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.175" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--bbe0b248-5f66-4731-a749-26bd47a645c4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.485Z", "modified": "2020-06-19T19:13:16.485Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52516, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--88bfa083-3c90-463e-9a39-c05c59dfe0c7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.485Z", "modified": "2020-06-19T19:13:16.485Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52516, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:10:58.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:10:58.000Z", "last_observed": "2019-10-19T21:10:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c3c9470f-5b4b-4e1a-b6c3-daf8044df50c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.485Z", "modified": "2020-06-19T19:13:16.485Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53730, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a5090c79-07e4-42e4-92af-5d4ce174726f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.485Z", "modified": "2020-06-19T19:13:16.485Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55458, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.25.60" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--06068551-9faf-4f82-9b3e-0893eecca29c", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.486Z", "modified": "2020-06-19T19:13:16.486Z", "objects": { "0": { "type": "ipv4-addr", "value": "171.229.235.204", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22723, "dst_port": 2323, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--2769dd41-79a5-404b-8b46-33e9e5fd5b4f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.486Z", "modified": "2020-06-19T19:13:16.486Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52496, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e6f38b05-834f-46bf-a468-9f52e09ee9d8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.486Z", "modified": "2020-06-19T19:13:16.486Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.17.33", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 42528, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c250b14c-32d4-44a3-b7e9-6c7f96f398f8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.486Z", "modified": "2020-06-19T19:13:16.486Z", "objects": { "0": { "type": "ipv4-addr", "value": "202.175.181.18", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 15948, "dst_port": 82, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9d4a105b-2c44-4bae-95ae-1b4694422356", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.486Z", "modified": "2020-06-19T19:13:16.486Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52496, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a86868d5-608f-4c10-9898-5559362af594", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.487Z", "modified": "2020-06-19T19:13:16.487Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53730, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6dcc287f-32a0-4852-b860-a90803db86fa", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.487Z", "modified": "2020-06-19T19:13:16.487Z", "objects": { "0": { "type": "ipv4-addr", "value": "165.22.28.252", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55912, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:10:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e7bcc477-da86-4e0a-9d8e-86084085a2e5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.487Z", "modified": "2020-06-19T19:13:16.487Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53732, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0bdf7c67-deb8-447b-8c11-c1d6a303c7ef", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.487Z", "modified": "2020-06-19T19:13:16.487Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53732, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--84aaa879-2ec0-4f49-889a-6614d6fd8c88", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.488Z", "modified": "2020-06-19T19:13:16.488Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 42528, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:11:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.17.33" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7b6ce809-c8c2-46f5-b935-9138a94683bc", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.488Z", "modified": "2020-06-19T19:13:16.488Z", "objects": { "0": { "type": "ipv4-addr", "value": "58.161.156.240", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52113, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-19T21:09:58.000Z", "end": "2019-10-19T21:12:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:09:58.000Z", "last_observed": "2019-10-19T21:09:58.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1e082e0c-d31f-4fb1-b912-70cecae721d3", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.488Z", "modified": "2020-06-19T19:13:16.488Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41910, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.168.205" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fe04317b-abfc-4755-87be-861a7446d154", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.488Z", "modified": "2020-06-19T19:13:16.488Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53658, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5e2ab149-717e-41bb-b786-6ea03b972f3e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.488Z", "modified": "2020-06-19T19:13:16.488Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35594, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.107.126" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--82c09ae0-3a1c-4484-b821-3a5097f28783", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.489Z", "modified": "2020-06-19T19:13:16.489Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53694, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e2d55923-a95d-4422-a083-fcb1d99ca3c5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.489Z", "modified": "2020-06-19T19:13:16.489Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53694, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9d6fe4e8-ebd3-4dc3-94c6-251c3bf5fbe2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.489Z", "modified": "2020-06-19T19:13:16.489Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41912, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.168.205" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b7ba8709-7a63-49cc-85a6-ed4caa6752e4", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.489Z", "modified": "2020-06-19T19:13:16.489Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.139.173", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 38072, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--14a12b45-f967-4930-9310-02c1f1524581", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.489Z", "modified": "2020-06-19T19:13:16.489Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35588, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.107.126" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7b2f7e4a-6a67-4d42-abc1-44d79f3ba776", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.490Z", "modified": "2020-06-19T19:13:16.490Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.168.205", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 41910, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4b32b7d2-d85c-4e4d-bf07-4079460fb798", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.490Z", "modified": "2020-06-19T19:13:16.490Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.168.205", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 41912, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d3e180fe-b83d-4370-a8e6-12cb65af11c5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.490Z", "modified": "2020-06-19T19:13:16.490Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 38072, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.139.173" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--807ef66d-ddd0-4e87-a33c-8af7568d0806", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.490Z", "modified": "2020-06-19T19:13:16.490Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.168.205", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 41914, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--df4d6f89-cf1b-4da3-94b0-b3402feef06a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.491Z", "modified": "2020-06-19T19:13:16.491Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.107.126", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35588, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--536e590c-dc34-40e8-a458-d030b18a12ab", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.491Z", "modified": "2020-06-19T19:13:16.491Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41914, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.168.205" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--98e6cb9a-b72f-4d47-9e48-48fc0f7da04a", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.491Z", "modified": "2020-06-19T19:13:16.491Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58448, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.141.113" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6074a815-7cfa-426b-bdfe-6ec405149f78", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.491Z", "modified": "2020-06-19T19:13:16.491Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53658, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0f967d45-2477-4fdf-a044-21f35c445ced", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.491Z", "modified": "2020-06-19T19:13:16.491Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35590, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.107.126" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--aee14de4-56b2-40be-bb5f-6894a5c676f2", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.492Z", "modified": "2020-06-19T19:13:16.492Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.141.113", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 58448, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d3b8154a-d9be-41b0-884f-d567177fd593", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.492Z", "modified": "2020-06-19T19:13:16.492Z", "objects": { "0": { "type": "ipv4-addr", "value": "45.136.109.15", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51840, "dst_port": 50300, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--19c89feb-b874-4bca-8313-1af74dbda6df", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.492Z", "modified": "2020-06-19T19:13:16.492Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.107.126", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35594, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cf4b1139-42fd-45d0-9002-788ab42fd114", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.492Z", "modified": "2020-06-19T19:13:16.492Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.107.126", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35592, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--20bb6d3c-ba38-400f-9c25-00adea352724", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.492Z", "modified": "2020-06-19T19:13:16.492Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 35592, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.107.126" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--19982f43-a44c-4619-bff8-858e60a19909", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.493Z", "modified": "2020-06-19T19:13:16.493Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.168.205", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 41908, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--f7069f1d-02c0-4d96-a0a4-75bc3bb0d0f8", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.493Z", "modified": "2020-06-19T19:13:16.493Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41908, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.216.168.205" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1d911da9-8bdc-4e2b-a18a-1104554bad37", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.493Z", "modified": "2020-06-19T19:13:16.493Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.216.107.126", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 35590, "protocols": [ "tcp" ], "start": "2019-10-19T21:04:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:04:56.000Z", "last_observed": "2019-10-19T21:04:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--fb66c819-a9f2-437a-96e3-81976a64c388", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.493Z", "modified": "2020-06-19T19:13:16.493Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52414, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--b6ac4b05-9af0-4445-8246-57af93e20e30", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.493Z", "modified": "2020-06-19T19:13:16.493Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.66", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 49536, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0ea909e6-40da-49b6-8e71-04afdccb2554", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.494Z", "modified": "2020-06-19T19:13:16.494Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52422, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6b6495b2-3fe4-4240-89b9-737d8f471241", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.494Z", "modified": "2020-06-19T19:13:16.494Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52422, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d6a68de5-8984-4115-b2df-cb3a6c13f8bb", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.494Z", "modified": "2020-06-19T19:13:16.494Z", "objects": { "0": { "type": "ipv4-addr", "value": "114.33.251.227", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 18595, "dst_port": 34567, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--53b03719-7596-4739-892c-67f5fb4f16e1", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.494Z", "modified": "2020-06-19T19:13:16.494Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52414, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e75f8aad-535c-4d63-b6c6-16bb615381c9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.494Z", "modified": "2020-06-19T19:13:16.494Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.51", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 57847, "dst_port": 8926, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5d8c73ec-eeae-4ebf-9c92-6741ab76b8be", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.494Z", "modified": "2020-06-19T19:13:16.494Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 49536, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.66" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--6e205f75-2211-45f5-ab06-7197e5c9d320", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.495Z", "modified": "2020-06-19T19:13:16.495Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.195", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 52424, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7cb86090-cbea-4f74-bc97-219b3ac22a21", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.495Z", "modified": "2020-06-19T19:13:16.495Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52424, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:03:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.195" } }, "first_observed": "2019-10-19T21:03:56.000Z", "last_observed": "2019-10-19T21:03:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--9770d038-7df2-4cd4-92c8-57e3e422c260", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.495Z", "modified": "2020-06-19T19:13:16.495Z", "objects": { "0": { "type": "ipv4-addr", "value": "89.248.160.193", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 51840, "dst_port": 5726, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:03:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--329022d1-13e2-4107-862b-5a0db9bf0145", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.495Z", "modified": "2020-06-19T19:13:16.495Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46824, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:03:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7b0ef7c2-1e78-4eee-9dc1-58491195acb9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.495Z", "modified": "2020-06-19T19:13:16.495Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.31.225", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 56406, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:03:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--c28ef01f-d2bc-491d-bc94-cd2201d3ed15", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.495Z", "modified": "2020-06-19T19:13:16.495Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46824, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:03:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cefec1c3-4527-4ae8-8b0a-a3467a79a547", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.496Z", "modified": "2020-06-19T19:13:16.496Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46826, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--0bd61e64-f1d6-4670-a638-2c56f5f01992", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.496Z", "modified": "2020-06-19T19:13:16.496Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 56406, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.31.225" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--adb43ee7-3810-4105-8232-a8a1e38e1696", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.496Z", "modified": "2020-06-19T19:13:16.496Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46826, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:04:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4798c045-8a63-4373-9179-f4b2cfa02988", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.496Z", "modified": "2020-06-19T19:13:16.496Z", "objects": { "0": { "type": "ipv4-addr", "value": "58.161.156.240", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 52113, "dst_port": 23, "protocols": [ "tcp" ], "start": "2019-10-19T21:02:56.000Z", "end": "2019-10-19T21:05:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:02:56.000Z", "last_observed": "2019-10-19T21:02:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--af110444-1a70-44ab-8188-0ef96b24a8ec", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.496Z", "modified": "2020-06-19T19:13:16.496Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 22, "dst_port": 53032, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "51.83.73.48" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--85ca2f26-c5e2-4e4f-8941-7682440dc1f6", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.497Z", "modified": "2020-06-19T19:13:16.497Z", "objects": { "0": { "type": "ipv4-addr", "value": "81.22.45.85", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 58633, "dst_port": 3389, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--7939235c-19c7-4c4f-9575-5397cd38128d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.497Z", "modified": "2020-06-19T19:13:16.497Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46818, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--905fa690-8520-4117-93f3-0eab9e443669", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.497Z", "modified": "2020-06-19T19:13:16.497Z", "objects": { "0": { "type": "ipv4-addr", "value": "92.53.65.40", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 41007, "dst_port": 5563, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--12a9e74c-65af-487c-a95e-25d96209c396", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.497Z", "modified": "2020-06-19T19:13:16.497Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46818, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--e1faa620-4f12-4d5b-a758-0b90cedd1809", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.498Z", "modified": "2020-06-19T19:13:16.498Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55868, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "52.46.159.128" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--98776673-24f2-4650-8b5d-d2561ae8c46e", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.498Z", "modified": "2020-06-19T19:13:16.498Z", "objects": { "0": { "type": "ipv4-addr", "value": "51.83.73.48", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53032, "dst_port": 22, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1b38ef3c-30d4-450d-ac2c-ce09204473e5", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.498Z", "modified": "2020-06-19T19:13:16.498Z", "objects": { "0": { "type": "ipv4-addr", "value": "39.109.193.221", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 23311, "dst_port": 5555, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--a0a21260-144f-44f2-9686-c8c9e9739dc7", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.498Z", "modified": "2020-06-19T19:13:16.498Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 46820, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:03:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.29.61" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--4cc7acf8-fe3f-4ba4-90ef-b73674b2bbe9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.498Z", "modified": "2020-06-19T19:13:16.498Z", "objects": { "0": { "type": "ipv4-addr", "value": "52.46.159.128", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 55868, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:03:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dcfc8ed4-bd99-454c-9dfa-f6e14cfc5d6b", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.499Z", "modified": "2020-06-19T19:13:16.499Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.29.61", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 46820, "protocols": [ "tcp" ], "start": "2019-10-19T21:01:56.000Z", "end": "2019-10-19T21:03:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:01:56.000Z", "last_observed": "2019-10-19T21:01:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--5f9ba908-89f8-438c-9b49-8eb5206e0627", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.499Z", "modified": "2020-06-19T19:13:16.499Z", "objects": { "0": { "type": "ipv4-addr", "value": "69.39.239.100", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47336, "dst_port": 1433, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:01:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--d8f94b8d-208b-4f9d-ad4c-15c8aa468dbf", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.499Z", "modified": "2020-06-19T19:13:16.499Z", "objects": { "0": { "type": "ipv4-addr", "value": "142.44.211.179", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 55955, "dst_port": 5500, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:01:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--dd80db17-f59e-4971-80e5-5ba27e1530c9", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.499Z", "modified": "2020-06-19T19:13:16.499Z", "objects": { "0": { "type": "ipv4-addr", "value": "67.205.169.236", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 47937, "dst_port": 8088, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:01:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--cce863e6-31cd-4ef2-928f-acb2006eb37f", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.499Z", "modified": "2020-06-19T19:13:16.499Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53618, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:01:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--1d71b960-be50-4845-860b-92ce9393d87d", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.500Z", "modified": "2020-06-19T19:13:16.500Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 53618, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:01:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.30.177" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--3c675de1-e357-4790-9c60-9f2d81d33f46", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.500Z", "modified": "2020-06-19T19:13:16.500Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.27.146", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 54636, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:01:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--65c133ab-e8ea-4159-a8df-7a7aedaa1e86", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.500Z", "modified": "2020-06-19T19:13:16.500Z", "objects": { "0": { "type": "ipv4-addr", "value": "172.31.88.63", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 54636, "dst_port": 443, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "54.239.27.146" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 }, { "id": "observed-data--32562de7-0b38-4a21-af6e-10a8aab14741", "type": "observed-data", "created_by_ref": "identity--e009dd41-ea6e-4647-a762-85b87b461d20", "created": "2020-06-19T19:13:16.500Z", "modified": "2020-06-19T19:13:16.500Z", "objects": { "0": { "type": "ipv4-addr", "value": "54.239.30.177", "x_com_aws_interface_id": "eni-02e70b8e842c70a2f" }, "1": { "type": "network-traffic", "src_ref": "0", "dst_ref": "2", "src_port": 443, "dst_port": 53628, "protocols": [ "tcp" ], "start": "2019-10-19T21:00:56.000Z", "end": "2019-10-19T21:02:55.000Z" }, "2": { "type": "ipv4-addr", "value": "172.31.88.63" } }, "first_observed": "2019-10-19T21:00:56.000Z", "last_observed": "2019-10-19T21:00:56.000Z", "x_com_aws": { "account_id": "979326520502" }, "number_observed": 1 } ] }