json
Parent rule for JSON Decoding detection.
200000
criminalip
criminalip
CriminalIP Events
100623
true
VPN detected in IP address: $(criminalip.ip)
vpn,criminalip
100623
true
TOR network detected in IP address: $(criminalip.ip)
tor,criminalip
100623
true
Proxy server detected in IP address: $(criminalip.ip)
proxy,criminalip
100623
true
Dark web activity detected in IP address: $(criminalip.ip)
darkweb,criminalip
100623
Critical
Critical risk score for IP address: $(criminalip.ip)
critical,criminalip
100623
Dangerous
Dangerous risk score for IP address: $(criminalip.ip)
dangerous,criminalip
100623
Moderate
Moderate risk score for IP address: $(criminalip.ip)
moderate,criminalip
100623
Low
Low risk score for IP address: $(criminalip.ip)
low,criminalip
100623
Safe
Safe score for IP address: $(criminalip.ip)
safe,criminalip
100623
true
Hosting service detected in IP address: $(criminalip.ip)
hosting,criminalip
100623
true
Cloud service detected in IP address:$(criminalip.ip)
cloud,criminalip
100623
true
Snort activity detected in IP address: $(criminalip.ip)
snort,criminalip
100623
true
Scanner activity detected in IP address: $(criminalip.ip)
scanner,criminalip
100623
true
Mobile network detected in IP address: $(criminalip.ip)
mobile,criminalip
100623
true
Anonymous VPN detected in IP address: $(criminalip.ip)
anonymous_vpn,criminalip
100623
Debugging CriminalIP integration: $(criminalip.ip)
debug,criminalip
100623
.*Missing Parameter.*
CriminalIP API error: Missing parameter in request
error,criminalip
100623
.*Invalid IP Address.*
CriminalIP API error: Invalid IP address format
error,criminalip
100623
.*Internal Server Error.*
CriminalIP API error: Internal server error encountered
error,criminalip