-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathOwner_ML.json
More file actions
1 lines (1 loc) · 111 KB
/
Owner_ML.json
File metadata and controls
1 lines (1 loc) · 111 KB
1
{"System": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "ThreatConnect Intelligence": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Firebog Prigent Phishing Domains": {"Mentions": [22630, 22630, 22630, 22630, 22630, 22630, 0, 0, 0, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Score": [67890.0, 67890.0, 67890.0, 67890.0, 67890.0, 67890.0, 0, 0, 0, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Host": [22630, 22630, 22630, 22630, 22630, 22630, 0, 0, 0, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "hpHosts Malware Distribution Domains": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch Zeus Tracker": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "hpHosts Phishing Domains": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "hpHosts Exploit Domains": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch URLHaus": {"Mentions": [35617, 35617, 35617, 35617, 35617, 35617, 0, 0, 0, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Score": [106851.0, 106851.0, 106851.0, 106851.0, 106851.0, 106851.0, 0, 0, 0, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [35617, 35617, 35617, 35617, 35617, 35617, 0, 0, 0, 0, 0], "URL_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "dan.me Tor Exit Nodes": {"Mentions": [334, 334, 334, 334, 334, 334, 0, 81, 81, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [334.0, 334.0, 334.0, 334.0, 334.0, 334.0, 0, 81, 81, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [334, 334, 334, 334, 334, 334, 0, 81, 81, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch TorrentLocker Ransomware C2 Domain Blocklist": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "WSTNPHX Malware Email Addresses": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch TeslaCrypt Ransomware C2 Domain Blocklist": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch Ransomware Tracker": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch Ransomware Domain Blocklist": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch Locky Ransomware C2 Domain Blocklist": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch CryptoWall Ransomware C2 Domain Blocklist": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "abuse.ch Feodo Tracker": {"Mentions": [75, 75, 75, 75, 75, 75, 6, 35, 35, 5, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "False", "True"], "Score": [225.0, 225.0, 225.0, 225.0, 225.0, 225.0, 18.0, 105, 105, 15, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "False", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [75, 75, 75, 75, 75, 75, 6, 35, 35, 5, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "False", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "VXVault": {"Mentions": [135, 135, 135, 135, 135, 135, 0, 6, 6, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [405.0, 405.0, 405.0, 405.0, 405.0, 405.0, 0, 18, 18, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [61, 61, 61, 61, 61, 61, 0, 2, 2, 0, 0], "URL_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Address": [14, 14, 14, 14, 14, 14, 0, 2, 2, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [60, 60, 60, 60, 60, 60, 0, 2, 2, 0, 0], "File_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "StopForumSpam Toxic CIDRs": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "SARVAM": {"Mentions": [31, 31, 31, 31, 31, 31, 0, 2, 2, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [37.0, 37.0, 37.0, 37.0, 37.0, 37.0, 0, 2, 2, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [31, 31, 31, 31, 31, 31, 0, 2, 2, 0, 0], "File_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "PhishTank": {"Mentions": [14823, 14823, 14823, 14823, 14823, 14823, 0, 1359, 1359, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [51426.0, 51426.0, 51426.0, 51426.0, 51426.0, 51426.0, 0, 4824, 4824, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [12201, 12201, 12201, 12201, 12201, 12201, 0, 1155, 1155, 0, 0], "URL_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Address": [2086, 2086, 2086, 2086, 2086, 2086, 0, 172, 172, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [457, 457, 457, 457, 457, 457, 0, 29, 29, 0, 0], "CIDR_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "ASN": [79, 79, 79, 79, 79, 79, 0, 3, 3, 0, 0], "ASN_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "OpenPhish": {"Mentions": [15384, 15384, 15384, 15384, 15384, 15384, 0, 3293, 3293, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [46152.0, 46152.0, 46152.0, 46152.0, 46152.0, 46152.0, 0, 9879, 9879, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [15384, 15384, 15384, 15384, 15384, 15384, 0, 3293, 3293, 0, 0], "URL_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Rutgers Attacker IPs": {"Mentions": [11272, 11272, 11272, 11272, 11272, 11272, 591, 2221, 2221, 271, 271], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "True", "True"], "Score": [33816.0, 33816.0, 33816.0, 33816.0, 33816.0, 33816.0, 1773.0, 6663, 6663, 813, 813], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [11272, 11272, 11272, 11272, 11272, 11272, 591, 2221, 2221, 271, 271], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "PDFExaminer": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Minotaur URLs": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Manwe Mac Malware": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Firebog Shalla Malware Domains": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Malware Domain Blocklist": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "MalShare Daily Malware List": {"Mentions": [66750, 66750, 66750, 66750, 66750, 66750, 0, 0, 0, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Score": [200250.0, 200250.0, 200250.0, 200250.0, 200250.0, 200250.0, 0, 0, 0, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [66750, 66750, 66750, 66750, 66750, 66750, 0, 0, 0, 0, 0], "File_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "MalwareConfig": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Maldun Malware Analysis": {"Mentions": [628, 628, 628, 628, 628, 628, 0, 71, 71, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [1884.0, 1884.0, 1884.0, 1884.0, 1884.0, 1884.0, 0, 213, 213, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [628, 628, 628, 628, 628, 628, 0, 71, 71, 0, 0], "File_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Haley SSH Bruteforce IPs": {"Mentions": [1435, 1435, 1435, 1435, 1435, 1435, 0, 80, 80, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [4305.0, 4305.0, 4305.0, 4305.0, 4305.0, 4305.0, 0, 240, 240, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [1435, 1435, 1435, 1435, 1435, 1435, 0, 80, 80, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Hybrid Analysis": {"Mentions": [8459, 8459, 8459, 8459, 8459, 8459, 0, 276, 276, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [5555.0, 5555.0, 5555.0, 5555.0, 5555.0, 5555.0, 0, 210, 210, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [1742, 1742, 1742, 1742, 1742, 1742, 0, 46, 46, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [1788, 1788, 1788, 1788, 1788, 1788, 0, 77, 77, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [4929, 4929, 4929, 4929, 4929, 4929, 0, 153, 153, 0, 0], "File_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Cert-pa.it Latest Malware Analysis": {"Mentions": [5, 5, 5, 5, 5, 5, 0, 0, 0, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Score": [15.0, 15.0, 15.0, 15.0, 15.0, 15.0, 0, 0, 0, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [5, 5, 5, 5, 5, 5, 0, 0, 0, 0, 0], "File_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "MITRE ATT&CK": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "GreenSnow Blocklist": {"Mentions": [11356, 11356, 11356, 11356, 11356, 11356, 0, 1599, 1599, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [34068.0, 34068.0, 34068.0, 34068.0, 34068.0, 34068.0, 0, 4797, 4797, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [11356, 11356, 11356, 11356, 11356, 11356, 0, 1599, 1599, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Cryptam": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Firebog Prigent Malware Domains": {"Mentions": [20492, 20492, 20492, 20492, 20492, 20492, 0, 0, 0, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Score": [61476.0, 61476.0, 61476.0, 61476.0, 61476.0, 61476.0, 0, 0, 0, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Host": [20492, 20492, 20492, 20492, 20492, 20492, 0, 0, 0, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Cybercrime Tracker": {"Mentions": [20, 20, 20, 20, 20, 20, 0, 0, 0, 2, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "False", "True"], "Score": [52.0, 52.0, 52.0, 52.0, 52.0, 52.0, 0, 0, 0, 4, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "False", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [16, 16, 16, 16, 16, 16, 0, 0, 0, 1, 0], "URL_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "False", "True"], "Address": [4, 4, 4, 4, 4, 4, 0, 0, 0, 1, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "False", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Firebog Airelle Hrsk Domains": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "DShield.org Recommended Blocklist CIDRs": {"Mentions": [9, 9, 9, 9, 9, 9, 0, 14, 14, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [27.0, 27.0, 27.0, 27.0, 27.0, 27.0, 0, 42, 42, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [9, 9, 9, 9, 9, 9, 0, 14, 14, 0, 0], "CIDR_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Disconnect.me Malvertising": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Cedia.org.ec Immortal Domains": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CINS Army IP List": {"Mentions": [24839, 24839, 24839, 24839, 24839, 24839, 0, 2221, 2221, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [74517.0, 74517.0, 74517.0, 74517.0, 74517.0, 74517.0, 0, 6663, 6663, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [24839, 24839, 24839, 24839, 24839, 24839, 0, 2221, 2221, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Suspected Ranking Manipulators": {"Mentions": [11922, 11922, 11922, 11922, 11922, 11922, 0, 840, 840, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [35766.0, 35766.0, 35766.0, 35766.0, 35766.0, 35766.0, 0, 2520, 2520, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [11922, 11922, 11922, 11922, 11922, 11922, 0, 840, 840, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Suspected DGA NRDs": {"Mentions": [3014, 3014, 3014, 3014, 3014, 3014, 0, 134, 134, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [9042.0, 9042.0, 9042.0, 9042.0, 9042.0, 9042.0, 0, 402, 402, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [3014, 3014, 3014, 3014, 3014, 3014, 0, 134, 134, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Retail-themed NRDs": {"Mentions": [981, 981, 981, 981, 981, 981, 0, 83, 83, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [2943.0, 2943.0, 2943.0, 2943.0, 2943.0, 2943.0, 0, 249, 249, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [981, 981, 981, 981, 981, 981, 0, 83, 83, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Manufacturing-themed NRDs": {"Mentions": [274, 274, 274, 274, 274, 274, 0, 29, 29, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [822.0, 822.0, 822.0, 822.0, 822.0, 822.0, 0, 87, 87, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [274, 274, 274, 274, 274, 274, 0, 29, 29, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Finance-themed NRDs": {"Mentions": [885, 885, 885, 885, 885, 885, 0, 41, 41, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [2655.0, 2655.0, 2655.0, 2655.0, 2655.0, 2655.0, 0, 123, 123, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [885, 885, 885, 885, 885, 885, 0, 41, 41, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de IMAP IPs": {"Mentions": [13784, 13784, 13784, 13784, 13784, 13784, 0, 2776, 2776, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [55136.0, 55136.0, 55136.0, 55136.0, 55136.0, 55136.0, 0, 11104, 11104, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [13784, 13784, 13784, 13784, 13784, 13784, 0, 2776, 2776, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Energy-themed NRDs": {"Mentions": [237, 237, 237, 237, 237, 237, 0, 10, 10, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [711.0, 711.0, 711.0, 711.0, 711.0, 711.0, 0, 30, 30, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [237, 237, 237, 237, 237, 237, 0, 10, 10, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Communications-themed NRDs": {"Mentions": [512, 512, 512, 512, 512, 512, 0, 54, 54, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [1536.0, 1536.0, 1536.0, 1536.0, 1536.0, 1536.0, 0, 162, 162, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [512, 512, 512, 512, 512, 512, 0, 54, 54, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL COVID19-themed Newly Registered Domains": {"Mentions": [143, 143, 143, 143, 143, 143, 0, 9, 9, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [286.0, 286.0, 286.0, 286.0, 286.0, 286.0, 0, 18, 18, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [69, 69, 69, 69, 69, 69, 0, 4, 4, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [74, 74, 74, 74, 74, 74, 0, 5, 5, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "BruteForceBlocker Blocklist": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Botvrij IPs": {"Mentions": [6, 6, 6, 6, 6, 6, 0, 0, 0, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Score": [18.0, 18.0, 18.0, 18.0, 18.0, 18.0, 0, 0, 0, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [6, 6, 6, 6, 6, 6, 0, 0, 0, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de FTP IPs": {"Mentions": [788, 788, 788, 788, 788, 788, 0, 58, 58, 0, 15], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "False"], "Score": [3152.0, 3152.0, 3152.0, 3152.0, 3152.0, 3152.0, 0, 232, 232, 0, 60], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "False"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [788, 788, 788, 788, 788, 788, 0, 58, 58, 0, 15], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "False"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Botvrij Domains": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de Bruteforce IPs": {"Mentions": [4009, 4009, 4009, 4009, 4009, 4009, 0, 616, 616, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [16036.0, 16036.0, 16036.0, 16036.0, 16036.0, 16036.0, 0, 2464, 2464, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [4009, 4009, 4009, 4009, 4009, 4009, 0, 616, 616, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "BotScout Bot List": {"Mentions": [2834, 2834, 2834, 2834, 2834, 2834, 0, 361, 361, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [5668.0, 5668.0, 5668.0, 5668.0, 5668.0, 5668.0, 0, 722, 722, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [1119, 1119, 1119, 1119, 1119, 1119, 0, 152, 152, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [1715, 1715, 1715, 1715, 1715, 1715, 0, 209, 209, 0, 0], "Email_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de Strong IPs": {"Mentions": [89, 89, 89, 89, 89, 89, 0, 5, 5, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [356.0, 356.0, 356.0, 356.0, 356.0, 356.0, 0, 20, 20, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [89, 89, 89, 89, 89, 89, 0, 5, 5, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Suspicious Nameservers": {"Mentions": [10, 10, 10, 10, 10, 10, 0, 8, 8, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [30.0, 30.0, 30.0, 30.0, 30.0, 30.0, 0, 24, 24, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [10, 10, 10, 10, 10, 10, 0, 8, 8, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Suspicious New Resolution IPs": {"Mentions": [2321, 2321, 2321, 2321, 2321, 2321, 0, 172, 172, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [6963.0, 6963.0, 6963.0, 6963.0, 6963.0, 6963.0, 0, 516, 516, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [2321, 2321, 2321, 2321, 2321, 2321, 0, 172, 172, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "CAL Suspicious Newly Registered Domains": {"Mentions": [648, 648, 648, 648, 648, 648, 0, 21, 21, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [1296.0, 1296.0, 1296.0, 1296.0, 1296.0, 1296.0, 0, 42, 42, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [338, 338, 338, 338, 338, 338, 0, 11, 11, 0, 0], "Host_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [310, 310, 310, 310, 310, 310, 0, 10, 10, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de Bot IPs": {"Mentions": [328, 328, 328, 328, 328, 328, 0, 24, 24, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [1312.0, 1312.0, 1312.0, 1312.0, 1312.0, 1312.0, 0, 96, 96, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [328, 328, 328, 328, 328, 328, 0, 24, 24, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de Apache IPs": {"Mentions": [4021, 4021, 4021, 4021, 4021, 4021, 278, 1126, 1126, 383, 383], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "False", "False"], "Score": [16084.0, 16084.0, 16084.0, 16084.0, 16084.0, 16084.0, 1112.0, 4504, 4504, 1532, 1532], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "False", "False"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [4021, 4021, 4021, 4021, 4021, 4021, 278, 1126, 1126, 383, 383], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "False", "False"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de SSH IPs": {"Mentions": [37274, 37274, 37274, 37274, 37274, 37274, 0, 4567, 4567, 0, 0], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Score": [149096.0, 149096.0, 149096.0, 149096.0, 149096.0, 149096.0, 0, 18268, 18268, 0, 0], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [37274, 37274, 37274, 37274, 37274, 37274, 0, 4567, 4567, 0, 0], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de SIP IPs": {"Mentions": [1702, 1702, 1702, 1702, 1702, 1702, 48, 239, 239, 31, 31], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "True", "True"], "Score": [6808.0, 6808.0, 6808.0, 6808.0, 6808.0, 6808.0, 192.0, 956, 956, 124, 124], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [1702, 1702, 1702, 1702, 1702, 1702, 48, 239, 239, 31, 31], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "False", "False", "False", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Blocklist.de Mail IPs": {"Mentions": [14404, 14404, 14404, 14404, 14404, 14404, 0, 3882, 3882, 0, 188], "Mention_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "False"], "Score": [57616.0, 57616.0, 57616.0, 57616.0, 57616.0, 57616.0, 0, 15528, 15528, 0, 752], "Score_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "False"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [14404, 14404, 14404, 14404, 14404, 14404, 0, 3882, 3882, 0, 188], "Address_Anomalies": ["False", "False", "False", "False", "False", "False", "True", "False", "False", "True", "False"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}, "Bambenek": {"Mentions": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Mention_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Score": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Score_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Host": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Host_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "URL": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "URL_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Address": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Address_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "File": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "File_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "CIDR": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "CIDR_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "ASN": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "ASN_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Email": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], "Email_Anomalies": ["True", "True", "True", "True", "True", "True", "True", "True", "True", "True", "True"], "Date": ["2021-07-26", "2021-07-27", "2021-07-28", "2021-07-29", "2021-07-29", "2021-08-02", "2021-08-03", "2021-08-03", "2021-08-03", "2021-08-05", "2021-08-05"], "Baseline": []}}