forked from firewalla/firewalla
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsample_data_intel.js
275 lines (266 loc) · 8.31 KB
/
sample_data_intel.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
exports.porndata = [{
"iplist": ["67.24.131.251"],
"_iplist": [
["UM2pZQ==", "UM2pZXOMPAdi7ZWuhv9ms8HBUm41T0Vo566GvQFwQnQ="],
["E7rqqw==", "E7rqq9L35LWcI4XgG08Z64OIUXRQ5IRlQKIlBKaI4nw="],
["euOHyg==", "euOHyhs+rCKjhfJsO851avTZgeyo221kgFrLe6Y5xmY="]
],
"alist": [],
"_alist": ["IaMrvOhvFN3Io5LL8HofaWlxUEDMKVXh5KalUc0nGjw=", "wg23LNQlap84jO30APqkyd7DWY8WEPB5sCPUqRl38aE="],
"hlist": ["cdn4-l3-cdn.xvideos.com"],
"_hlist": [
["UM2pZQ==", "UM2pZXOMPAdi7ZWuhv9ms8HBUm41T0Vo566GvQFwQnQ="],
["E7rqqw==", "E7rqq9L35LWcI4XgG08Z64OIUXRQ5IRlQKIlBKaI4nw="]
],
"flow": {
"ts": 1503513418.507972,
"sh": "192.168.2.191",
"_ts": 1503513439,
"dh": "67.24.131.251",
"ob": 18359,
"rb": 18891888,
"ct": 4,
"fd": "in",
"lh": "192.168.2.191",
"du": 28.846853,
"pr": "tcp",
"sp": 56584,
"dp": 80,
"shname": "(?)iPhone/iOS"
}
}];
exports.wechat = [{
"iplist": ["203.205.129.101"],
"_iplist": [
["WdUw0g==", "WdUw0sBzLT/cExrdFkvrH9xsFvG5HyPGkjTUROaZehM="],
["7iKSEg==", "7iKSEjkSGlMVaQ9WksEW73W78nPNjQt1pxtw5RAH+7E="],
["Wvda4g==", "Wvda4rd7DIXSIHB+q5BX7LnCMXyZUGtUiVesz7NmEXc="],
["zikalA==", "zikalO0yAT0RdnNcdVxn1U2jdjpA0WcyDUeDg+Hy1AE="]
],
"alist": [],
"_alist": ["cjZT5uwd8LMNJxykAfAu0qQb298asIfZWjRGTkbrQ5Y=", "rlTisOShsod55fouDAVn4hHNDAERRw6Or44EvbiQqm0=", "Xi1/19p/P17F/+ivDXXJ4vIzPD1ZQYBF+uCsGhjwBiI="],
"hlist": ["hkextshort.weixin.qq.com"],
"_hlist": [
["WdUw0g==", "WdUw0sBzLT/cExrdFkvrH9xsFvG5HyPGkjTUROaZehM="],
["7iKSEg==", "7iKSEjkSGlMVaQ9WksEW73W78nPNjQt1pxtw5RAH+7E="],
["Wvda4g==", "Wvda4rd7DIXSIHB+q5BX7LnCMXyZUGtUiVesz7NmEXc="]
],
"flow": {
"ts": 1503587422.414983,
"sh": "192.168.2.188",
"_ts": 1503587433,
"dh": "203.205.129.101",
"ob": 7879,
"rb": 5384,
"ct": 11,
"fd": "in",
"lh": "192.168.2.188",
"du": 8.577069999999999,
"pr": "tcp",
"sp": 50182,
"dp": 80,
"shname": "Jerry-iPhone"
}
}];
exports.pinterest = [{
"iplist": [
"52.22.201.0"
],
"hlist": [
"log.pinterest.com"
],
"alist": [
"log.pinterest.com"
],
"_iplist": [
[
"qrMobw==",
"qrMobwJCERLIS9tNdc2pW0wwuAnO4G61kRGOL5dan1k="
],
[
"Y4xrGw==",
"Y4xrG2vLYYV+ZYU9ure/UB9ehQ28HgF/SXnLY1X4EvE="
],
[
"pD3lqg==",
"pD3lqibQmaSd6Mvg/ohMaSWWmus9SHNVFzBJjRo18Yk="
]
],
"_alist": ['bnmxO/hXWYl/0dXnynv9J1ZGQulFv1iar+eeLEBPEQk=',
'DTeOz77UssjWXsGTBKZQ7pR+TiXxB6DurYBP+/UzlMY='
],
"_hlist": [
[
"Y4xrGw==",
"Y4xrG2vLYYV+ZYU9ure/UB9ehQ28HgF/SXnLY1X4EvE="
],
[
"pD3lqg==",
"pD3lqibQmaSd6Mvg/ohMaSWWmus9SHNVFzBJjRo18Yk="
]
]
}];
exports.netflix = [{
"iplist": ["52.3.219.94"],
"_iplist": [
["PA4zsQ==", "PA4zsT4kOKoXgsZW0fboS0/m0/cBWDsuUx2abBClQFo="],
["g9fRMA==", "g9fRMJEhlJbePtGl3v8qvG2cbzJllOYjBjX2aTzcZ3M="],
["oRsbPg==", "oRsbPmkBpN5ur7krSSyQ3EJx1vw9RbbH+NqOpGWh4tg="],
["Xtcghg==", "XtcghjH5Rudd5cU2LR1tAN95qtf5HQByv17OZBTVwog="],
["4LrpEg==", "4LrpEgYWz0lToEOzDAMorN26USrSF8qj+st6E9eOrwU="]
],
"hlist": ["api-global.latency.prodaa.netflix.com"],
"_hlist": [
["PA4zsQ==", "PA4zsT4kOKoXgsZW0fboS0/m0/cBWDsuUx2abBClQFo="],
["g9fRMA==", "g9fRMJEhlJbePtGl3v8qvG2cbzJllOYjBjX2aTzcZ3M="],
["oRsbPg==", "oRsbPmkBpN5ur7krSSyQ3EJx1vw9RbbH+NqOpGWh4tg="],
["Xtcghg==", "XtcghjH5Rudd5cU2LR1tAN95qtf5HQByv17OZBTVwog="]
],
"_alist": ["fq787vyvqNs/FZVEQj2x/u8AQ7y/bnULrU9KlZboJUA=",
"881O2BHs1IblNU3yjYaS21YWdlJFP/tH32u3WZ+bun0=",
"oSRIwiHv3zgeC+XXVUm4PiQHNB58pqOk6F93nxQ4NQM="
]
}];
exports.porndata2 = [{
"iplist": ["31.192.120.36"],
"_iplist": [
["2umitg==", "2umitm1Y1UsiSKnNBfIcGwlz2Aza0D6GuvEd2nSSHDk="],
["AG8XiA==", "AG8XiEe9ksj5o/G7ckxWc6NEfyvmD/pBageE22kV4TY="], "ZYDQn21a685dA2uqidZKIAjSv45J2rKoBNhmws0EK/s="
],
"alist": [],
"_alist": [],
"hlist": ["www.pornhub.com"],
"_hlist": [
["2umitg==", "2umitm1Y1UsiSKnNBfIcGwlz2Aza0D6GuvEd2nSSHDk="],
["AG8XiA==", "AG8XiEe9ksj5o/G7ckxWc6NEfyvmD/pBageE22kV4TY="]
],
"flow": {
"ts": 1503510998.780039,
"sh": "192.168.2.191",
"_ts": 1503511017,
"dh": "31.192.120.36",
"ob": 3731,
"rb": 2124300,
"ct": 5,
"fd": "in",
"lh": "192.168.2.191",
"du": 56.277732,
"pr": "tcp",
"sp": 52784,
"dp": 80,
"shname": "(?)iPhone/iOS"
}
}];
exports.notporn = [{
"iplist": ["35.160.226.92"],
"_iplist": [
["27uplw==", "27upl7Tmr9tZ8jiBbprD+k3OQ6RXSS7nBwlv0BFEe5w="],
["ARy8Ug==", "ARy8UvJLk6F/H2IfzUxlt6ic9Gb5S7vWFFhvXkftQnM="],
["vcN8QQ==", "vcN8QXpv+4Ien7AFFj1vOrY4I/mIKpOIj7Z6w5ysfW8="],
["hKTONg==", "hKTONtLHGS8T6Kaag/PB33IPQyO1OnfL1N8c5eNQh1g="]
],
"alist": [],
"_alist": ["QsAUAkNJz/TTJABObCZs7BPzHreFE6yFeMc+rF9x3aM=", "80/uDjwpj1KBQIQVPLEQlPF4AoLGNiNBmBZjjvfVU3Q=", "Z13UL4MwolZA3U0v1ontTsVYOzdRvWLKLLTuqpRUwRk="],
"hlist": ["versioncheck-bg.addons.mozilla.org"],
"_hlist": [
["27uplw==", "27upl7Tmr9tZ8jiBbprD+k3OQ6RXSS7nBwlv0BFEe5w="],
["ARy8Ug==", "ARy8UvJLk6F/H2IfzUxlt6ic9Gb5S7vWFFhvXkftQnM="],
["vcN8QQ==", "vcN8QXpv+4Ien7AFFj1vOrY4I/mIKpOIj7Z6w5ysfW8="]
],
"flow": {
"ts": 1503614496.786893,
"sh": "192.168.2.106",
"_ts": 1503614513,
"dh": "35.160.226.92",
"ob": 373,
"rb": 3157,
"ct": 1,
"fd": "in",
"lh": "192.168.2.106",
"du": 6.052381,
"pr": "tcp",
"sp": 64343,
"dp": 443,
"shname": "(?)Giga-byte Technology"
}
}];
exports.porndata3 = [{
"iplist": ["8.12.206.51"],
"_iplist": [
["3QZkWw==", "3QZkW4zY83SFd3/EbiDZnkmLwVg33y+wpd3XnEaBM/A="],
["UwtrQQ==", "UwtrQWTLo2N4VFDTVKELrAi0f/M/cKItuVtseHlWc5A="],
["qxNFoQ==", "qxNFoWFXnsBeYz7olSJG+e7axMDVj918iVlKEthdnuw="],
["YNaADA==", "YNaADK0ubN84l/tTMLR5GbcrQakTycywfeT7P8FttRc="],
["hiSXmA==", "hiSXmGgcBPFMAbjdCJGFiMJwWg0Yt/fEY79pS4j1c1M="]
],
"alist": ["img-l3.xvideos.com.fpbns.net"],
"_alist": ["yF28/myishPOIcYt9iH5cFpQK1rl8eJT3SUqRLN8sEI=", "McGF99rQoV09tyvQaxGFPvbE1/rlE7MOtg/478xOaQQ=", "oB1LOHfz/MRZ+oqazDgqnoVMR3awOtL7kU3w2BRg87w="],
"hlist": ["img-l3.xvideos.com.fpbns.net"],
"_hlist": [
["3QZkWw==", "3QZkW4zY83SFd3/EbiDZnkmLwVg33y+wpd3XnEaBM/A="],
["UwtrQQ==", "UwtrQWTLo2N4VFDTVKELrAi0f/M/cKItuVtseHlWc5A="],
["qxNFoQ==", "qxNFoWFXnsBeYz7olSJG+e7axMDVj918iVlKEthdnuw="],
["YNaADA==", "YNaADK0ubN84l/tTMLR5GbcrQakTycywfeT7P8FttRc="]
],
"flow": {
"ts": 1503636495.796557,
"sh": "192.168.2.188",
"_ts": 1503636504,
"dh": "8.12.206.51",
"ob": 427,
"rb": 46336,
"ct": 1,
"fd": "in",
"lh": "192.168.2.188",
"du": 0.170877,
"pr": "tcp",
"sp": 56517,
"dp": 80,
"shname": "Jerry-iPhone"
}
}];
exports.porndata4 = [{
"iplist": ["185.88.181.12"],
"_iplist": [
["UM2pZQ==", "UM2pZXOMPAdi7ZWuhv9ms8HBUm41T0Vo566GvQFwQnQ="],
["/oFRbQ==", "/oFRbTsMjpBH0fHrQIN5uaFLPkhEDkwA86k2xKKEz/8="],
["4+ib8w==", "4+ib86jfiVjY/SwTqnhmoqC6RkzbZX1BjaBcrdKGw/Y="]
],
"alist": ["www.xvideos.com"],
"_alist": ["IaMrvOhvFN3Io5LL8HofaWlxUEDMKVXh5KalUc0nGjw=", "dd3AJnxIPkaTYSj05sqq1CG4qAe16zaIw8Ilrec9DSw="],
"hlist": ["www.xvideos.com"],
"_hlist": [
["UM2pZQ==", "UM2pZXOMPAdi7ZWuhv9ms8HBUm41T0Vo566GvQFwQnQ="],
["/oFRbQ==", "/oFRbTsMjpBH0fHrQIN5uaFLPkhEDkwA86k2xKKEz/8="]
],
"flow": {
"ts": 1503636487.688159,
"sh": "192.168.2.188",
"_ts": 1503636509,
"dh": "185.88.181.12",
"ob": 1521,
"rb": 37383,
"ct": 2,
"fd": "in",
"lh": "192.168.2.188",
"du": 21.843584,
"pr": "tcp",
"sp": 56503,
"dp": 80,
"shname": "Jerry-iPhone"
}
}];
exports.malware1 = [{"_iplist":[["lljWzw==","lljWz+2lwGW1w4oWl29ztpZpRoeX/uNJH4qXpMSxT0U="],["OMCrcg==","OMCrcrk6QlSbvzGP9/e4XJE/kzMLG5Fp0aB0VQLVrjE="]],"_alist":["f8/eN6tTzcaJGFtrxXr56+m+Zeqb48vsNOHX7OmG928="],"_hlist":[["lljWzw==","lljWz+2lwGW1w4oWl29ztpZpRoeX/uNJH4qXpMSxT0U="]],"flow":{"ts":1506239081.511192,"sh":"BIsMAz2V/PV3/YOI4mmYJVWGe6gM6RKNhgGfHirRi8E=","_ts":1506239091,"dh":"OMCrcrk6QlSbvzGP9/e4XJE/kzMLG5Fp0aB0VQLVrjE=","ob":10838,"rb":35096,"ct":107,"fd":"in","lh":"BIsMAz2V/PV3/YOI4mmYJVWGe6gM6RKNhgGfHirRi8E=","du":10.723972,"pr":"tcp","sp":54608,"dp":80}}];
exports.porndata5 = [{
iplist: ['69.172.201.153'],
hlist: ['pornhun.com'],
_iplist: [
['lKfiCQ==', 'lKfiCSA24AqbD62iCdqXHe19BF/JU8pjyoIW+3YQDsI=']
],
_hlist: [
['M3ne5A==', 'M3ne5OtqlMs/MTuDPsUNF6/3s2heNgDDmjE8pLj+XaY=']
],
flow: {
fd: 'in'
}
}];